VULNERABILITY INTELLIGENCE
CVE-2024-8454
CVSS score5.3 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2024-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.
Weakness classification
- twcert@cert.org.tw: CWE-400
Primary references
- twcert@cert.org.tw — Third Party Advisory
- twcert@cert.org.tw — Third Party Advisory