CVE-2024-8450 affects specific PLANET Technology switch models (GS-4210-24P2S, GS-4210-24PL4C and their firmware) due to a hard-coded SNMPv1 community string. This critical vulnerability (CVSS 9.8) allows unauthenticated remote attackers to gain read-write access to the SNMPv1 service, leading to full compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or community discussions are currently identified, the high CVSS score and ease of exploitation (AV:N/AC:L/PR:N/UI:N) warrant immediate attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.305b240802CPE matchmatch criteria | cpe:2.3:o:planet:gs-4210-24p2s_firmware:*:*:*:*:*:*:*:* | ||
< 2.305b240719CPE matchmatch criteria | cpe:2.3:o:planet:gs-4210-24pl4c_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.