PLANET TECHNOLOGY INDUSTRIAL SWITCH FLAWS RISK FULL TAKEOVER – PATCH NOW

Summary from the TLDR InfoSec newsletter

Multiple Critical Vulnerabilities have been identified in Planet Technology's industrial switches. CVE-2025-46275 and CVE-2025-46271 allow complete control of the router, while CVE-2025-46273 reveals hard-coded communication credentials between the NMS and managed devices, enabling remote interception and configuration changes. There are also vulnerabilities affecting specific switches. Researchers also found lax security practices, including the use of default or weak credentials for MQTT and MongoDB.