Experts from PT SWARM, a division of Positive Technologies, identified five vulnerabilities in the IGS-5225-8P2T4S industrial managed switch produced by Planet Technology. These security flaws, assigned identifiers PT-2026-95413 through PT-2026-95457, received scores ranging from 6.7 to 8.7 out of 10 on the CVSS 4.0 scale.
The vulnerabilities could allow attackers to gain full administrative access to the device's operating system or cause a denial-of-service condition. Such disruptions in industrial control systems could potentially halt technological processes. The flaws were found in both the first and second versions of the switch, affecting specific firmware iterations.
Three of the identified issues reside in the switch's web service, while others relate to undocumented debug commands in the CLI and the use of outdated password hashing algorithms. Exploitation requires network access to the web service or CLI and a compromised user account. The vendor has released firmware updates, specifically version v1.2412b260707 for the first version and v2.2412b260519 for the second.
For systems where immediate firmware updates are not feasible, experts recommend restricting network access to the web interface and CLI, as well as disabling the Telnet protocol. Security monitoring systems such as PT Industrial Security Incident Manager, PT Network Attack Discovery, and PT NGFW can be used to detect or block attempts to exploit these vulnerabilities.
