CVE-2026-81946

MEDIUMCVSS 4.4

Description

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.

Timeline

Published:September 18th, 2026 4:17 PM

Last modified:September 22nd, 2026 8:43 PM

CVSS Scoring

CVSS v3: 4.4 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-121

References & Reports

Advisories, patches, and third-party reports

https://www.planet.com.tw/en/support/security-advisory/11
https://www.vulncheck.com/advisories/planet-igs-5225-8p2t4s-v1-v2-weak-password-hashing-via-md5-algorithm

Source: NIST NVD · Data may lag official sources by up to one minute