Detections
Analytics

CVE-2025-9972

critical

Description

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device.

References

https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html

https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html

https://www.planet.com.tw/en/support/security-advisory/8

Details

Source: Mitre, NVD

Published: 2025-09-17

Updated: 2025-09-23

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 9.3

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: Critical

EPSS

EPSS: 0.00334