Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109445— PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie

Quick assessment

Affected
PLANET Technology Corp. PLANET GS-5220-8P2T2S
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PLANET GS-5220-8P2T2S（硬件版本 3.0）在固件版本 3.2412b261008 之前存在一个基于栈的缓冲区溢出漏洞。该漏洞允许未经身份验证的攻击者通过提交过长的 HTTP Cookie 值来破坏栈内存，因为该 Cookie 值被复制到一个固定大小的栈缓冲区中，且未进行长度校验。攻击者可发送一个精心构造的、包含超长 Cookie 值的未认证 HTTP 请求，以覆盖保存的返回地址并破坏栈内存，从而导致内存损坏，并可能引发设备拒绝服务（DoS）。

CVSS 9.8 · Critical EPSS 0.43% · P38

Affected Version Matrix 1

VendorProduct Version RangeStatus
PLANET Technology Corp. PLANET GS-5220-8P2T2S < 3.2412b261008 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109445

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie
Source: CVE Program / CVE List V5
Vulnerability Description
PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by submitting an oversized webstax_auth HTTP Cookie value that is copied into a fixed-size stack buffer without length validation. Attackers can send a crafted unauthenticated HTTP request with an oversized cookie to overwrite the saved return address and corrupt stack memory, leading to memory corruption and potential denial of service on the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
PLANET Technology Corp. PLANET GS-5220-8P2T2S 0 ~ 3.2412b261008 -

II. Public POCs for CVE-2026-109445

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109445

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-109445 (1)

Other References for CVE-2026-109445 (1)

IV. Related Vulnerabilities

Same vendor: PLANET Technology Corp.
Same weakness: CWE-121