CyberRota Analysis
AI-GeneratedThe PLANET IGS-5225-8P2T4S industrial managed switch firmware versions prior to 1.2412b260707 and 2.2412b260519 are vulnerable to an OS command injection flaw in the web server, allowing remote authenticated attackers to execute arbitrary commands and potentially escalate privileges to root. Organizations using these switches should prioritize patching this vulnerability to mitigate the risk of unauthorized system access and control. This is particularly critical for environments relying on industrial control systems where security and uptime are paramount.
Original NVD Description
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.