CVE-2025-9971

CRITICAL

Planet Technology Industrial Cellular Gateway - Auth Bypass

Title source: llm
STIX 2.1

Description

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality.

References (3)

Core 3
Core References
Various Sources third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html
Various Sources third-party-advisory
https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html

Scores

CVSS v3 9.8
EPSS 0.0078
EPSS Percentile 51.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-306
Status published
Products (2)
Planet Technology/ICG-2510W-LTE (EU/US) < 1.0_20240411
Planet Technology/ICG-2510WG-LTE (EU/US) < 1.0-20240918
Published Sep 17, 2025
Tracked Since Feb 18, 2026