CVE-2026-81946

Katalog CVE

CVSS 4.4 · Medium EPSS 0,17%

Kerentanan Stack-based Buffer Overflow. Skor CVSS 3.1 4.4 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.

Rincian

Terbit di NVD

18 September 2026

Terakhir diubah

22 September 2026

Status NVD

Deferred

CVSS 3.1

4.4 (Medium), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,3% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.planet.com.tw/en/support/security-advisory/11
• https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-weak-password-hashing-via-md5-algorithm