CVE-2025-9972 is a critical OS Command Injection vulnerability affecting specific models of Planet Technology Industrial Cellular Gateways. Unauthenticated remote attackers can exploit this flaw to execute arbitrary OS commands on the device. With a CVSS score of 9.8, it presents a high-severity risk due to its network-based attack vector, low complexity, and complete compromise potential (confidentiality, integrity, availability). Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it shows minimal community discussion or media coverage, indicating a lack of active exploitation or widespread awareness at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Planet Technology | ICG-2510W-LTE (EU/US) | >= 0, <= 1.0_20240411CNA affecteddefault unaffected | |
| Planet Technology | ICG-2510WG-LTE (EU/US) | >= 0, <= 1.0-20240918CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.