The PLANET IGS-5225-8P2T4S industrial managed switch firmware versions prior to 1.2412b260707 (V1) and 2.2412b260519 (V2) contain a stack-based buffer overflow vulnerability in the web server. This vulnerability arises from insufficient bounds checking when copying data into a stack buffer. An attacker with remote administrator privileges can exploit this to cause a denial of service or potentially execute arbitrary code on the underlying OS. The CVSS 4.0 base score is 7.5, reflecting a high severity with network attack vector, high attack complexity, and requiring high privileges.

Successful exploitation can lead to denial of service or arbitrary code execution on the device's operating system. This could compromise device availability and potentially allow an attacker to gain control over the affected switch. The attack requires remote administrator privileges and has a high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote administrative access to trusted networks and users only. Monitor for unusual activity on the device. Do not assume the vulnerability is mitigated without vendor confirmation.