CVE-2026-81943: PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying operating system and gain root-level access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PLANET IGS-5225-8P2T4S industrial managed switchto a version that resolves this vulnerability.Fixed in 1.2412b260707 - Upgrade
Upgrade
PLANET IGS-5225-8P2T4S industrial managed switchto a version that resolves this vulnerability.Fixed in 2.2412b260519
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires privileged access to the affected switch. An attacker who already has that level of access can enable the embedded debug functionality and execute code as root on the underlying operating system.
Which firmware versions need remediation?
IGS-5225-8P2T4S V1 firmware versions before 1.2412b260707 and V2 firmware versions before 2.2412b260519 are affected. Devices running earlier firmware should be updated to the applicable fixed version.
Does this vulnerability require user interaction or remote network access?
No user interaction is required. The reported vector is local, and the attacker must first have privileged access to the device.