CVE-2024-8449

6.8 mediumEPSS 0.3%

Medium (6.8) in planet. EPSS 0.3% chance of exploitation in the next 30 days.

Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2024-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

planet:gs-4210-24p2s_firmware
planet:gs-4210-24pl4c_firmware

References

https://www.twcert.org.tw/en/cp-139-8048-f0e4d-2.html
https://www.twcert.org.tw/tw/cp-132-8047-adf79-1.html

Check your stack JSON