VULNERABILITY INTELLIGENCE

CVE-2024-8449

CVSS score6.8 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

Weakness classification

  • twcert@cert.org.tw: CWE-798
  • nvd@nist.gov: CWE-798

Primary references