← Vulnerability feed

Vulnerability record · CVE-2025-54406 · published 7 October 2025

CVE-2025-54406: Planet wgr-500 firmware os command injection vulnerability

Planet · Wgr 500 Firmware

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `counts` request parameter.

8.8 CVSS 3.1 High EPSS 4.3% · top 9.3% CWE-78 · OS command injection
8.8CVSS 3.1 base score
4.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `counts` request parameter.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2229 ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2229

Track CVE-2025-54406 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2025-54403Planet wgr-500 firmware os command injection vulnerabilityMultiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request…EPSS 4.6%8.8CVE-2025-54404Planet wgr-500 firmware os command injection vulnerabilityMultiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request…EPSS 4.6%8.8CVE-2025-54405Planet wgr-500 firmware os command injection vulnerabilityMultiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of …EPSS 4.3%8.8CVE-2025-54399Planet wgr-500 firmware stack-based buffer overflow vulnerabilityMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted ser…EPSS 0.77%8.8CVE-2025-54400Planet wgr-500 firmware stack-based buffer overflow vulnerabilityMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted ser…EPSS 0.73%8.8CVE-2025-54401Planet wgr-500 firmware stack-based buffer overflow vulnerabilityMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted ser…EPSS 0.73%8.8CVE-2025-54402Planet wgr-500 firmware stack-based buffer overflow vulnerabilityMultiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted ser…EPSS 0.77%8.8CVE-2025-48826Planet wgr-500 firmware vulnerabilityA format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests c…EPSS 6.9%

Source: NIST National Vulnerability Database (record CVE-2025-54406), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.