Planet WGR-500 Format String Vulnerability in formPingCmd Functionality
Vulnerability
A format string vulnerability has been identified in the Planet WGR-500 router, specifically in version 1.3411b190912. The issue arises within the formPingCmd function, where user-supplied data is improperly handled, leading to memory corruption. An attacker can exploit this vulnerability by sending a series of crafted HTTP requests.
Impact
Exploitation of this vulnerability can result in memory corruption, which may be leveraged for arbitrary code execution.
Added: Oct 7, 2025, 2:26 PM
Updated: Oct 7, 2025, 2:26 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.3remediation
0.0relevance
0.6threat
4.8urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.