CVE-2024-48871 - CVE House

Back to Database

Status published Critical CVE-2024-48871

Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

9.3 CVSS

Vulnerability Description

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-48871

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Tomer Goldschmidt of Claroty Research - Team82 reported this vulnerability to CISA.

References

More from Planet Technology

View All →

Planet Technology｜Industrial Cellular Gateway - OS Command Injection

Planet Technology｜Industrial Cellular Gateway - Missing Authentication

Planet Technology Network Products Missing Authentication for Critical Function

Planet Technology Network Products Use of Hard-coded Credentials

Planet Technology Network Products Use of Hard-coded Credentials

Affected Vendor

Planet Technology

View all reports →

Affected Software

Planet WGS-804HPT

Vulnerable Versions:

v1.305b210531

Timeline

Official Publish: December 6th, 2024

Last Modified: December 6th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control

T1485 Data Destruction