VULNERABILITY INTELLIGENCE

CVE-2024-8456

CVSS score9.8 CRITICAL
EPSS probability0.58%
CISA KEVNot currently listed
Published2024-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.

Weakness classification

  • twcert@cert.org.tw: CWE-306

Primary references