← Database

CVE-2024-8449

MEDIUM CVSS: 6.8 Published: 2024-09-30 Modified: 2026-06-17

Description

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

Affected Platforms

Planet Gs-4210-24P2SPlanet Gs-4210-24Pl4C FirmwarePlanet Gs-4210-24P2S FirmwarePlanet Gs-4210-24Pl4C

Weakness Type

CWE-798, CWE-798

References