← Back

CVE-2024-8459

nvd nist
Published: Sep 30, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.

Affected (2)

Planet
2 products
Gs 4210 24p2s Firmware
Gs 4210 24pl4c Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gs 4210 24p2s Firmware
Before 3.305b240802
Running on/withPlatform Versions
Planet
Gs 4210 24p2s
Version 3.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gs 4210 24pl4c Firmware
Before 2.305b240719
Running on/withPlatform Versions
Planet
Gs 4210 24pl4c
Version 2.0

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

Source: twcert@cert.org.tw
Third Party Advisory
Source: twcert@cert.org.tw
Third Party Advisory

Timeline

No history available yet.