CVE-2024-8457

4.8 mediumEPSS 0.3%

Medium (4.8) in planet. EPSS 0.3% chance of exploitation in the next 30 days.

Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject arbitrary JavaScript, leading to Stored XSS attack.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

planet:gs-4210-24p2s_firmware
planet:gs-4210-24pl4c_firmware

References

https://www.twcert.org.tw/en/cp-139-8064-70255-2.html
https://www.twcert.org.tw/tw/cp-132-8063-01634-1.html

Check your stack JSON