NetSight
high8.8

CVE-2024-8448

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privil…

Impact

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.

Affected products

VendorProductAffected versions
PlanetGs-4210-24p2s Firmware
before 3.305b240802
PlanetGs-4210-24pl4c Firmware
before 2.305b240719

Weakness classification

References