Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

PLANET Technology switch models

Source

twcert@cert.org.tw

CVE-2024-8450 details

Published : Sept. 30, 2024, 7:15 a.m.
Last Modified : Sept. 30, 2024, 12:45 p.m.

Description

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

CVSS Score

1	2	3	4	5	6	7	8.6	9	10

Weakness

Weakness	Name	Description
CWE-798	Use of Hard-coded Credentials	The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

Base Score

8.6

Exploitability Score

3.9

Impact Score

4.7

Base Severity