CVE-2026-75122 in PLANET GS-4210-16P2S
Summary
by MITRE • 08/28/2026
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without sanitization of shell metacharacters. A remote attacker with administrator web credentials can submit a crafted certificate upload request to execute arbitrary operating-system commands on the device.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 08/28/2026
The vulnerability identified in PLANET GS-4210-16P2S firmware versions prior to 3.441b260626 represents a critical authenticated OS command injection flaw located within the /cgi-bin/httpuploadcert.cgi script. This specific component is responsible for handling certificate upload requests, which are essential for maintaining secure communications and validating identity in network infrastructure devices. The core technical failure lies in how the application processes input from the certificate password field during this upload process. Instead of properly sanitizing or escaping special characters that hold meaning to the operating system shell, such as semicolons, ampersands, pipes, or backticks, the firmware directly incorporates these unsanitized values into a command string executed by the underlying OS interpreter. This lack of input validation allows an attacker who has obtained valid administrator credentials through phishing, credential stuffing, or other means to inject malicious commands that are then executed with the privileges of the web server process running on the device.
From a classification perspective, this vulnerability aligns closely with CWE-78 Improper Neutralization of Special Elements used in an OS Command and CWE-94 Improper Control of Generation of Code. The presence of authentication requirements places it within the context of authenticated attacks as defined by MITRE ATT&CK technique T1059 Command and Scripting Interpreter, specifically where an adversary leverages existing access to execute arbitrary code on a target system. While the requirement for admin credentials mitigates some risk associated with unauthenticated remote exploitation, it does not eliminate the severity because network administrators often possess broad privileges that can be abused to compromise the entire device or pivot into other parts of the internal network. The ability to inject commands via a certificate upload interface is particularly dangerous as this functionality may be less frequently monitored than standard login interfaces, providing an attacker with a persistent and potentially stealthy foothold within the management plane of the switch.
The operational impact of successfully exploiting this vulnerability is severe, granting the attacker full control over the operating system hosting the web service. This level of access allows for comprehensive reconnaissance, including enumeration of local users, network configurations, and connected devices. Attackers can install backdoors, modify firewall rules to allow unauthorized traffic, exfiltrate sensitive data such as stored credentials or encryption keys, or use the compromised switch as a pivot point to launch attacks against other systems on the internal network. In industrial control environments or critical infrastructure settings where these switches are commonly deployed, this could lead to significant operational disruption, safety hazards, or long-term compromise of organizational security posture. The persistence of such access depends on whether the attacker modifies system files or creates new user accounts with elevated privileges, making remediation urgent even after initial detection.
Mitigation strategies must prioritize immediate patching as the primary defense mechanism. Administrators should upgrade the PLANET GS-4210-16P2S firmware to version 3.441b260626 or later, where the developers have implemented proper input validation and output encoding for shell command arguments. In environments where immediate patching is not feasible due to operational constraints, network segmentation should be enforced to restrict access to the management interface of these switches solely from trusted administrative subnets using strict firewall rules. Additionally, implementing multi-factor authentication for all administrator accounts adds a layer of defense against credential theft that could lead to exploitation. Security monitoring tools should also be configured to detect anomalous outbound connections or unusual command execution patterns originating from network infrastructure devices, providing an early warning system for potential compromise attempts targeting this specific vulnerability vector.