CVE-2024-8448: PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials
Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8448?
CVE-2024-8448 is considered a critical vulnerability due to its remote exploitability and the presence of hard-coded credentials.
How do I fix CVE-2024-8448?
To remediate CVE-2024-8448, update the firmware of the affected PLANET Technology switch models to the latest version that addresses this vulnerability.
Which devices are affected by CVE-2024-8448?
CVE-2024-8448 affects specific PLANET Technology switch models including GS-4210-24P2S and GS-4210-24PL4C with certain firmware versions.
Can CVE-2024-8448 be exploited remotely?
Yes, CVE-2024-8448 can be exploited remotely by attackers who can then gain unauthorized access to the device's root shell.
What are the consequences of not fixing CVE-2024-8448?
Failing to fix CVE-2024-8448 could lead to unauthorized access and control over the network devices, posing significant security risks.