CVE-2024-8453: PLANET Technology switch devices - Weak hash for users' passwords
Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files to obtain the hash values, and potentially crack them to retrieve the plaintext passwords.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8453?
CVE-2024-8453 has a high severity due to the weak password hashing allowing potential unauthorized access to user credentials.
How do I fix CVE-2024-8453?
To mitigate CVE-2024-8453, update the PLANET Technology switch firmware to the latest available version that addresses this vulnerability.
Who is affected by CVE-2024-8453?
CVE-2024-8453 affects users of certain PLANET Technology switch models, specifically the GS-4210-24P2S and GS-4210-24PL4C, running vulnerable firmware versions.
What is the impact of CVE-2024-8453?
The impact of CVE-2024-8453 includes the risk of attackers being able to crack hashed user passwords, leading to potential unauthorized access.
Can CVE-2024-8453 be exploited remotely?
Yes, CVE-2024-8453 can be exploited remotely by attackers with administrator privileges.