{"affected":[{"defaultStatus":"unaffected","product":"PLANET GS-5220-8P2T2S","source":"CNA: VulnCheck","vendor":"PLANET Technology Corp.","versions":[{"lessThan":"3.2412b261008","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-109445","cwes":["CWE-121"],"description":"PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by submitting an oversized webstax_auth HTTP Cookie value that is copied into a fixed-size stack buffer without length validation. Attackers can send a crafted unauthenticated HTTP request with an oversized cookie to overwrite the saved return address and corrupt stack memory, leading to memory corruption and potential denial of service on the device.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.3,"severity":"critical","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":9.8,"severity":"critical","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794581303301,"publishedAt":1794581303301,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory","patch"],"url":"https://www.planet.com.tw/en/support/security-advisory/12"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/planet-gs-5220-8p2t2s-stack-buffer-overflow-via-webstax-auth-cookie"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.planet.com.tw/en/support/security-advisory/12"}],"revision":"8716f9c3a084e683c16b5cb6bdc5a9b7f9237ec69eaa32431d6728e7154615fa","sources":[{"modifiedAt":1794581303301,"name":"CNA: VulnCheck","retrievedAt":1794582516010,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109445"}],"ssvc":null,"status":"published","title":"PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie","updatedAt":1794582516010}