CVE-2024-8450: PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8450?
CVE-2024-8450 is considered a high severity vulnerability due to the potential for unauthorized remote access with read-write privileges.
How do I fix CVE-2024-8450?
To fix CVE-2024-8450, change the hard-coded SNMPv1 community string and configure access controls in your switch settings.
Which devices are affected by CVE-2024-8450?
CVE-2024-8450 affects certain switch models from PLANET Technology, including the GS-4210-24P2S and GS-4210-24PL4C with specific firmware versions.
Can CVE-2024-8450 be exploited remotely?
Yes, CVE-2024-8450 can be exploited remotely, allowing attackers to leverage the hard-coded community string for unauthorized access.
Is there a patch available for CVE-2024-8450?
A patch may be available; users should check with PLANET Technology for the latest firmware updates to mitigate CVE-2024-8450.