CVE-2024-8459
Published Sep 30, 2024Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to…
Vendor/product archive
planet / gs-4210-24p2s CVEs
Beta · best-effort12 CVEs tagged to planet / gs-4210-24p2s — 1 Critical, 7 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2024-8458
Published Sep 30, 2024Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user in…
CVE-2024-8457
Published Sep 30, 2024Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator pri…
CVE-2024-8456
Published Sep 30, 2024Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and up…
CVE-2024-8455
Published Sep 30, 2024The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this servic…
CVE-2024-8454
Published Sep 30, 2024The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing un…
CVE-2024-8453
Published Sep 30, 2024Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read…
CVE-2024-8452
Published Sep 30, 2024Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obta…
CVE-2024-8451
Published Sep 30, 2024Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers t…
CVE-2024-8450
Published Sep 30, 2024Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to acces…
CVE-2024-8449
Published Sep 30, 2024Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device v…
CVE-2024-8448
Published Sep 30, 2024Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with t…
Showing 1-12 of 12 CVEsPage 1 of 1