CVE-2024-8459: PLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords
Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8459?
CVE-2024-8459 is a high-severity vulnerability due to the storage of SNMPv3 passwords in plaintext.
How do I fix CVE-2024-8459?
To fix CVE-2024-8459, update the firmware of the affected PLANET Technology switch models to the latest version that addresses the vulnerability.
Which devices are affected by CVE-2024-8459?
CVE-2024-8459 affects certain models of PLANET Technology switches, specifically those with firmware versions prior to 3.305b240802 and 2.305b240719.
Can CVE-2024-8459 be exploited remotely?
Yes, CVE-2024-8459 can be exploited remotely by attackers with administrator privileges who can access the configuration files.
What are the impacts of CVE-2024-8459?
The impact of CVE-2024-8459 includes unauthorized access to SNMPv3 user credentials, potentially leading to further exploitation of network resources.