CVE-2024-8452

high

Description

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.

References

Advisories
References

https://www.twcert.org.tw/tw/cp-132-8053-274bd-1.html

https://www.twcert.org.tw/en/cp-139-8054-231ad-2.html

https://securityonline.info/planet-technology-switches-face-cve-2024-8456-cvss-9-8-urgent-firmware-updates-advised/?&web_view=true

Details

Source: Mitre, NVD

Published: 2024-09-30

Updated: 2024-10-04

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N