PLANET IGS-5225-8P2T4S EUVD-2026-82991

Requires administrative access to the device's web management server: the description states exploitation is by 'a remote administrator,' matching PR:H. The attacker must reach the web server over the network (AV:N) and craft input that overflows an internal stack buffer; AC:H indicates reliable code execution is non-trivial and may only yield a crash (DoS) in many attempts. Limiting factors: valid admin credentials are mandatory, the web management interface must be network-reachable from the attacker, and the target must run firmware before V1 1.2412b260707 / V2 2.2412b260519. No end-user interaction is needed (UI:N).

This is a genuine but attacker-precondition-heavy issue. The vendor CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:H/UI:N, VC:H/VI:H/VA:H, score 7.5) describes a network-reachable stack overflow whose worst case is code execution on the switch OS, but exploitation is gated by PR:H - the description explicitly says 'a remote administrator,' meaning valid administrative credentials to the web management interface are required. AC:H further indicates non-trivial exploitation (crafting a reliable stack-smash for full RCE rather than a simple crash). There is no EPSS score, no CISA KEV listing, and no public exploit code provided, so exploitation status is 'no public exploit identified at time of analysis.' The signals are internally consistent: high technical impact but constrained by administrative authentication, so this is a real-priority patch for exposed/multi-tenant management planes rather than a mass-exploitable internet threat. The main risk driver is that management interfaces on industrial switches are sometimes left on shared or weakly-segmented networks, and an administrator account (or credential compromise) turns a config-level foothold into potential OS-level code execution on infrastructure hardware.

An authenticated administrator (or an attacker who has obtained admin credentials, e.g., via default/reused passwords) sends a crafted oversized field to the switch's web server, overflowing an insufficiently-bounds-checked stack buffer. This crashes the management service (DoS) or, with a reliably built payload, executes arbitrary code on the switch's underlying OS. No public proof-of-concept is available, and the AC:H rating reflects that weaponizing this to reliable RCE is non-trivial.