{"id":"CVE-2025-9972","state":"PUBLISHED","title":"Planet Technology｜Industrial Cellular Gateway - OS Command Injection","description":"Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device.","publishedAt":"2025-09-17T07:01:52.453Z","updatedAt":"2025-09-23T04:26:58.640Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"twcert"},"assigner":"twcert","products":["Planet Technology ICG-2510WG-LTE (EU/US)","Planet Technology ICG-2510W-LTE (EU/US)"],"affected":[{"vendor":"Planet Technology","product":"ICG-2510WG-LTE (EU/US)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.0-20240918","versionType":"custom"}]},{"vendor":"Planet Technology","product":"ICG-2510W-LTE (EU/US)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.0_20240411","versionType":"custom"}]}],"references":["https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html","https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html","https://www.planet.com.tw/en/support/security-advisory/8"],"weaknesses":["CWE-78"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/9xxx/CVE-2025-9972.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-9972","state":"PUBLISHED","datePublished":"2025-09-17T07:01:52.453Z","dateUpdated":"2025-09-23T04:26:58.640Z","assignerShortName":"twcert","assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateReserved":"2025-09-04T07:06:17.436Z"},"containers":{"cna":{"title":"Planet Technology｜Industrial Cellular Gateway - OS Command Injection","descriptions":[{"lang":"en","value":"Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device."}],"affected":[{"vendor":"Planet Technology","product":"ICG-2510WG-LTE (EU/US)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.0-20240918","versionType":"custom"}]},{"vendor":"Planet Technology","product":"ICG-2510W-LTE (EU/US)","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"1.0_20240411","versionType":"custom"}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html","tags":["third-party-advisory"]},{"url":"https://www.planet.com.tw/en/support/security-advisory/8","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"twcert","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateUpdated":"2025-09-23T04:26:58.640Z"},"datePublic":"2025-09-17T06:49:00.000Z","impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Update ICG-2510WG-LTE (EU/US) to version 1.0_20250811 or later</span><br><span style=\"background-color: rgb(255, 255, 255);\">Update ICG-2510W-LTE (EU/US) to version 1.0_20250811 or later</span>\n\n<br>"}],"value":"Update ICG-2510WG-LTE (EU/US) to version 1.0_20250811 or later\nUpdate ICG-2510W-LTE (EU/US) to version 1.0_20250811 or later"}],"source":{"advisory":"TVN-202509006","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-17T12:56:21.988633Z","id":"CVE-2025-9972","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-17T12:56:29.266Z"}}]}}}