Planet Technology Planet Wgs-804Hpt vulnerabilities

CVE-2024-52320 [CRITICAL] CWE-78 CVE-2024-52320: The affected product is vulnerable to a command injection. An unauthenticated attacker could send co The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.

CVE-2024-48871 [CRITICAL] CWE-121 CVE-2024-48871: The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker cou The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution.

CVE-2024-52558 [MEDIUM] CWE-191 CVE-2024-52558: The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.