CVE-2024-8456 in GS-4210-24PL4C Hardware 2.0

Riassunto

di MITRE • 30/09/2024

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Twcert
• Prenotare: 05/09/2024
• Divulgazione: 30/09/2024
• Moderazione: accettato
• Voce: VDB-278847
• CPE: pronto
• CWE: CWE-306 (confermato)
• CVSS: 9.8 (CNA)
• EPSS: 0.00575
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-8456
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-8456
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-8456/