Skip to main content

Gs 4210 24P2S Firmware CVE-2024-8449

MEDIUM
Use of Hard-coded Credentials (CWE-798)
2024-09-30 twcert@cert.org.tw
6.8
CVSS 3.1 · Vendor: cert
Share

Severity by source

Vendor (cert) PRIMARY
6.8 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (cert) · only source for this CVE.

CVSS VectorVendor: cert

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Sep 30, 2024 - 07:15 cve.org
MEDIUM 6.8

DescriptionCVE.org

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

AnalysisAI

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password. Affected products include: Planet Gs-4210-24P2S Firmware, Planet Gs-4210-24Pl4C Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.

CVE-2024-8456 CRITICAL
9.8 Sep 30

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, a

CVE-2024-8450 CRITICAL
9.8 Sep 30

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthor

CVE-2024-8458 HIGH
8.8 Sep 30

Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CS

CVE-2024-8448 HIGH
8.8 Sep 30

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowi

CVE-2024-8454 HIGH
7.5 Sep 30

The swctrl service is used to detect and remotely manage PLANET Technology devices. Rated high severity (CVSS 7.5), this

CVE-2024-8452 HIGH
7.5 Sep 30

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption

CVE-2024-8451 HIGH
7.5 Sep 30

Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated co

CVE-2024-8455 MEDIUM
5.9 Sep 30

The swctrl service is used to detect and remotely manage PLANET Technology devices. Rated medium severity (CVSS 5.9), th

CVE-2024-8459 MEDIUM
4.9 Sep 30

Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files,

CVE-2024-8453 MEDIUM
4.9 Sep 30

Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salte

CVE-2024-8457 MEDIUM
4.8 Sep 30

Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters,

Share

CVE-2024-8449 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy