CVE-2024-8451
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users from accessing the SSH service.
Affected (2)
Products: Planet: Gs 4210 24p2s Firmware, Gs 4210 24pl4c Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.305b240802 |
| Running on/with | Platform Versions |
|---|---|
Planet Gs 4210 24p2s | Version 3.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.305b240719 |
| Running on/with | Platform Versions |
|---|---|
Planet Gs 4210 24pl4c | Version 2.0 |
Related CWEs
CWE-280
Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References (2)
Timeline
No history available yet.