CVE-2024-2741: Cross-Site Request Forgery in Planet IGS-4215-16T2S

Published Mar 21, 2024

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or updating accounts through the Switch web interface.

Affected Software

1 affected component

Planet IGS-4215-16T2S

Remediation

Information

Vulnerability fixed in firmware version 1.305b231218.

Event History

Mar 21, 2024

CVE Published

via MITRE·11:43 AM

Data Sourced

via MITRE·11:43 AM

RemedyDescriptionSeverityWeakness

Apr 11, 2024

Data Sourced

via NVD·01:25 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-2741?

CVE-2024-2741 is classified as a moderate severity Cross-Site Request Forgery (CSRF) vulnerability.

How do I fix CVE-2024-2741?

To fix CVE-2024-2741, update the firmware of the Planet IGS-4215-16T2S to the latest version provided by the vendor.

What can an attacker do with CVE-2024-2741?

An attacker exploiting CVE-2024-2741 could trick authenticated users into performing unintended actions in their session.

Which devices are affected by CVE-2024-2741?

CVE-2024-2741 affects the Planet IGS-4215-16T2S devices running firmware version 1.305b210528.

Is CVE-2024-2741 a known vulnerability?

Yes, CVE-2024-2741 is a known vulnerability that has been documented and recognized in cybersecurity databases.