CyberRota Analysis
AI-GeneratedThe firmware of PLANET GS-4210-16P2S devices prior to version 3.441b260626 is vulnerable to authenticated stack buffer overflow issues in multiple handlers, allowing remote authenticated attackers to exploit these flaws. This can lead to denial of service by crashing the CGI process or web management service. Organizations using this firmware should prioritize patching to mitigate potential disruptions in service.
Original NVD Description
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The web_login_first_post handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the web_sys_enablePasswd_post handler copies the enbPass POST parameter into a fixed-size stack buffer without length validation, and the web_sys_localUser_post handler copies the usrName and usrPass POST parameters into fixed-size stack buffers without length validation. A remote authenticated attacker can send a crafted request to crash the CGI process or web management service, resulting in denial of service.