CVE-2024-52558: Planet Technology Planet WGS-804HPT Integer Underflow
Published Dec 6, 2024
·Updated
The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.
Affected Software
1 affected component
Planet Technology WGS-804HPT
Remediation
Information
Planet Technology recommends users upgrade to version 1.305b241111 https://www.planet.com.tw/en/support/downloads or later.
Event History
Dec 6, 2024
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-52558?
CVE-2024-52558 is classified as a medium severity vulnerability due to its potential to crash the affected program.
2
How do I fix CVE-2024-52558?
To fix CVE-2024-52558, you should apply the latest firmware update provided by Planet Technology for the WGS-804HPT.
3
Who is affected by CVE-2024-52558?
CVE-2024-52558 affects users of the Planet Technology WGS-804HPT switch.
4
What type of attack does CVE-2024-52558 allow?
CVE-2024-52558 allows an unauthenticated attacker to crash the program by sending a malformed HTTP request.
5
What is the potential impact of CVE-2024-52558?
The potential impact of CVE-2024-52558 is system downtime caused by the program crashing due to integer underflow.