CVE-2024-2740: Exposure of Sensitive Information to an Unauthorized Actor in Planet IGS-4215-16T2S

Published Mar 21, 2024

Updated

Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to access some administrative resources due to lack of proper management of the Switch web interface.

Affected Software

1 affected component

Planet IGS-4215-16T2S

Remediation

Information

Vulnerability fixed in firmware version 1.305b231218.

Event History

Mar 21, 2024

CVE Published

via MITRE·11:40 AM

Data Sourced

via MITRE·11:40 AM

RemedyDescriptionSeverityWeakness

Apr 11, 2024

Data Sourced

via NVD·01:25 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-2740?

CVE-2024-2740 has been classified as a medium severity vulnerability due to the risk of unauthorized access to administrative resources.

How do I fix CVE-2024-2740?

To fix CVE-2024-2740, it is recommended to update the firmware of Planet IGS-4215-16T2S to the latest version that addresses this vulnerability.

What are the potential impacts of CVE-2024-2740?

The potential impacts of CVE-2024-2740 include unauthorized access to sensitive configuration and administrative resources on affected devices.

Who is affected by CVE-2024-2740?

Users of Planet IGS-4215-16T2S with firmware version 1.305b210528 are affected by CVE-2024-2740.

Is there a workaround for CVE-2024-2740?

Currently, there is no officially documented workaround for CVE-2024-2740; upgrading the firmware is the primary mitigation strategy.