VULNERABILITY INTELLIGENCE
CVE-2024-8459
CVSS score7.2 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.
Weakness classification
- CWE-312: Cleartext Storage of Sensitive Information
Primary references
- twcert@cert.org.tw — Third Party Advisory
- twcert@cert.org.tw — Third Party Advisory