A high-severity pre-authentication memory corruption vulnerability in the PLANET GS-4210-16P2S firmware allows unauthenticated remote attackers to cause a denial of service.

The web management interface contains a buffer overflow vulnerability (CWE-120) located in the _readHttpParam function. An unauthenticated attacker can supply an oversized HTTP query string to the dispatcher.cgi endpoint, which fails to properly terminate strings, leading to potential memory corruption or a denial of service.

Successful exploitation of this vulnerability results in a denial of service for the device's web management interface, which can disrupt administrative capabilities and network oversight. With a CVSS score of 7.5, the risk is classified as High due to the ease of remote, unauthenticated exploitation. This could lead to significant operational downtime for network infrastructure relying on this specific switch model.

Immediate Action: Update the firmware of all affected PLANET GS-4210-16P2S devices to version 3.441b260626 or later as specified by the vendor security advisory.

Proactive Monitoring: Monitor device logs and network traffic for unusual GET requests directed at the dispatcher.cgi endpoint, which may indicate attempted exploitation.

Compensating Controls: Implement access control lists (ACLs) to restrict access to the web management interface to trusted management IP addresses only, reducing the attack surface.

Public Exploit Available: No

Given the potential for remote denial of service and the lack of required authentication for an attacker, immediate patching is essential to maintain network stability. Administrators should prioritize updating firmware on all internet-facing or widely accessible management interfaces to prevent unauthorized disruption of services.