CyberRota Analysis
AI-GeneratedThe firmware of PLANET GS-4210-16P2S prior to version 3.441b260626 is vulnerable to authenticated stack buffer overflow and null pointer dereference issues in the /cgi-bin/dispatcher.cgi component. These vulnerabilities allow a remote authenticated attacker to exploit the system by sending specially crafted requests, potentially leading to denial of service by crashing the CGI process or web management service. Organizations using this firmware should prioritize patching to mitigate the risk of service disruption.
Original NVD Description
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post family of handlers copies the radKey, radKey_0, radDftParamKey, radName, and radIp POST parameters into fixed-size stack buffers without length validation, and additionally dereferences radName and radIp without verifying their presence in the request. A remote authenticated attacker can send crafted requests to crash the CGI process or web management service, resulting in denial of service.