CVE-2024-52320 Planet Technology CVE debrief

Who should care

Organizations operating Planet WGS-804HPT industrial switches in manufacturing, utility, transportation, or other OT environments. Security teams responsible for industrial control system infrastructure, network administrators managing industrial Ethernet deployments, and OT security practitioners monitoring CISA ICS advisories should prioritize this vulnerability due to its unauthenticated remote exploitation vector and critical severity rating.

Technical summary

The Planet Technology Planet WGS-804HPT, an industrial managed PoE switch, contains a command injection vulnerability in its HTTP request handling. An unauthenticated attacker can craft malicious HTTP requests that inject and execute arbitrary operating system commands on the device, resulting in complete system compromise. The vulnerability is remotely exploitable without authentication, requires no user interaction, and provides high impact across confidentiality, integrity, and availability dimensions. The affected firmware version is 1.305b210531.

Defensive priority

critical

Recommended defensive actions

• Upgrade affected Planet WGS-804HPT devices to firmware version 1.305b241111 or later as specified by the vendor
• Restrict network access to device management interfaces to trusted administrative hosts only
• Monitor for unauthorized HTTP requests to device management endpoints
• Apply network segmentation to isolate industrial control devices from untrusted networks
• Review CISA ICS recommended practices for defense-in-depth strategies
• Assess device inventory to identify all deployed WGS-804HPT units running affected firmware
• Consider temporary network isolation for devices that cannot be immediately patched

Evidence notes

CISA published advisory ICSA-24-340-02 on December 5, 2024, identifying this vulnerability in Planet Technology's WGS-804HPT industrial switch. The advisory confirms unauthenticated command injection through HTTP requests with remote code execution impact. CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H supports the 9.8 critical score. Vendor remediation guidance specifies upgrade to firmware 1.305b241111 or later.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.