1. Home
  2. CVE Database
  3. CVE-2024-8450
HIGH · 8.6

CVE-2024-8450

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service ...

Vulnerability Description

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
PlanetGs-4210-24P2S Firmware< 3.305b240802
PlanetGs-4210-24P2S3.0
PlanetGs-4210-24Pl4C Firmware< 2.305b240719
PlanetGs-4210-24Pl4C2.0

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2024-8450?

CVE-2024-8450 is a vulnerability with a CVSS score of 8.6 (HIGH). Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service ...

How severe is CVE-2024-8450?

CVE-2024-8450 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-8450?

Check the references section above for vendor advisories and patch information. Affected products include: Planet Gs-4210-24P2S Firmware, Planet Gs-4210-24P2S, Planet Gs-4210-24Pl4C Firmware, Planet Gs-4210-24Pl4C.