Skip to main content

Planet CVE-2023-33553

CRITICAL
Improper Authentication (CWE-287)
2023-06-07 cve@mitre.org
Authentication Bypass Planet Wdrt 1800Ax Firmware
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 07, 2023 - 15:15 nvd
CRITICAL 9.8

DescriptionNVD

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie.

AnalysisAI

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Affected products include: Planet Wdrt-1800Ax Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in Planet

View all
CVE-2025-44898 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_logi
CVE-2025-44897 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_up
CVE-2025-44890 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv
CVE-2025-44888 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_gl
CVE-2025-44885 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_rem
CVE-2025-44893 CRITICAL POC
9.8 May 20

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt
CVE-2020-26097 CRITICAL POC
9.8 Nov 18

The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root ac
CVE-2024-8456 CRITICAL
9.8 Sep 30

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, a
CVE-2024-8450 CRITICAL
9.8 Sep 30

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthor
CVE-2024-8458 HIGH
8.8 Sep 30

Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CS
CVE-2024-8448 HIGH
8.8 Sep 30

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowi
CVE-2024-8454 HIGH
7.5 Sep 30

The swctrl service is used to detect and remotely manage PLANET Technology devices. Rated high severity (CVSS 7.5), this

Same weakness CWE-287 – Improper Authentication

View all
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2020-0688 HIGH POC
8.8
CVE-2023-46805 HIGH POC
8.2
CVE-2023-35078 CRITICAL POC
9.8
CVE-2015-1187 CRITICAL POC
9.8
CVE-2024-7593 CRITICAL POC
9.8
CVE-2017-7921 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2023-33553 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy