CVEvulnerability

CVE-2024-8449

6.8 MEDIUM Published 2024-09-30 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-798

Description

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

Affected configurations

• planet gs-4210-24p2s firmware (< 3.305b240802) • planet gs-4210-24pl4c firmware (< 2.305b240719)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References