Planet Technology Industrial Cellular Gateway Missing Authentication Vulnerability
Vulnerability
A missing authentication vulnerability has been identified in certain models of Industrial Cellular Gateway developed by Planet Technology, specifically the ICG-2510WG-LTE and ICG-2510W-LTE series. This vulnerability allows unauthenticated remote attackers to manipulate the device through specific functionalities. The issue is present in the ICG-2510WG-LTE (EU/US) versions 1.0-20240918 and prior, as well as the ICG-2510W-LTE (EU/US) versions 1.0_20240411 and prior.
Impact
Exploitation of this vulnerability may lead to unauthorized access to system functions and privilege escalation.
Remediation
Users are advised to update the ICG-2510WG-LTE (EU/US) to version 1.0_20250811 or later, and to update the ICG-2510W-LTE (EU/US) to version 1.0_20250811 or later.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.