CVE-2024-8454
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.
Affected (2)
Products: Planet: Gs 4210 24p2s Firmware, Gs 4210 24pl4c Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 3.305b240802 |
| Running on/with | Platform Versions |
|---|---|
Planet Gs 4210 24p2s | Version 3.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.305b240719 |
| Running on/with | Platform Versions |
|---|---|
Planet Gs 4210 24pl4c | Version 2.0 |
Related CWEs
CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
References (2)
Timeline
No history available yet.