CVE-2024-8450 — PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string

CVE-2024-8450

PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string PUBLISHED

Description (CNA)

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

Affected (CNA)

Vendor / product	Versions
PLANET Technology / GS-4210-24PL4C hardware 2.0	affected 0 before 2.305b240719
PLANET Technology / GS-4210-24P2S hardware 3.0	affected 0 before 3.305b240802

CWE

CWE-798

References

https://www.twcert.org.tw/tw/cp-132-8049-83fe4-1.html
https://www.twcert.org.tw/en/cp-139-8050-52f32-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.