← Back

CVE-2024-8449

nvd nist
Published: Sep 30, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: twcert@cert.org.tw (Secondary)

Description

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

Affected (2)

Planet
2 products
Gs 4210 24p2s Firmware
Gs 4210 24pl4c Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gs 4210 24p2s Firmware
Before 3.305b240802
Running on/withPlatform Versions
Planet
Gs 4210 24p2s
Version 3.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gs 4210 24pl4c Firmware
Before 2.305b240719
Running on/withPlatform Versions
Planet
Gs 4210 24pl4c
Version 2.0

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

Source: twcert@cert.org.tw
Third Party Advisory
Source: twcert@cert.org.tw
Third Party Advisory

Timeline

No history available yet.