Description (CNA)
Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PLANET Technology / GS-4210-24PL4C hardware 2.0 | affected 0 before 2.305b240719 |
| PLANET Technology / GS-4210-24P2S hardware 3.0 | affected 0 before 3.305b240802 |
CWE
CWE-312
References
- https://www.twcert.org.tw/tw/cp-132-8067-2fc50-1.html
- https://www.twcert.org.tw/en/cp-139-8068-8aaa5-2.html
ADP enrichment
No English description supplied.
No references supplied.