Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-8452

PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PLANET Technology GS-4210-24PL4C hardware 2.0

Default version status: unaffected

  • 0 to < 2.305b240719affected

PLANET Technology GS-4210-24P2S hardware 3.0

Default version status: unaffected

  • 0 to < 3.305b240802affected

References