VULNERABILITY INTELLIGENCE

CVE-2024-8451

CVSS score7.5 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users from accessing the SSH service.

Weakness classification

  • CWE-280: Improper Handling of Insufficient Permissions or Privileges
  • CWE-400: Uncontrolled Resource Consumption

Primary references