CVE-2024-8455: PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords
The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets can directly crack them to obtain plaintext passwords.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8455?
CVE-2024-8455 is classified as a high severity vulnerability due to its potential for remote exploitation without proper authentication.
How do I fix CVE-2024-8455?
To mitigate CVE-2024-8455, update the affected PLANET Technology devices to the latest firmware version that resolves this vulnerability.
What devices are impacted by CVE-2024-8455?
CVE-2024-8455 affects certain models of PLANET Technology switches including the GS-4210-24P2S and GS-4210-24PL4C, among others.
What type of vulnerability is CVE-2024-8455?
CVE-2024-8455 is an authentication vulnerability that allows unauthorized remote attackers to exploit weak token security.
Is there a workaround for CVE-2024-8455?
Currently, the only effective mitigation for CVE-2024-8455 is to apply the recommended firmware updates to the affected devices.