high8.8
CVE-2024-8458
Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF).
Impact
Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user and perform actions on their behalf, such as creating accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Planet | Gs-4210-24p2s Firmware | before 3.305b240802 |
| Planet | Gs-4210-24pl4c Firmware | before 2.305b240719 |