Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-8448

PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PLANET Technology GS-4210-24PL4C hardware 2.0

Default version status: unaffected

  • 0 to < 2.305b240719affected

PLANET Technology GS-4210-24P2S hardware 3.0

Default version status: unaffected

  • 0 to < 3.305b240802affected

References