CVE-2024-8448 PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials
Remote attackers with regular privileges can use hard-coded credentials to gain root access on PLANET Technology switches.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8448?
CVE-2024-8448 is a high-severity vulnerability in PLANET Technology GS-4210-24P2S hardware 3.0, published on 30 Sep 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.
Weakness: CWE-798
Which versions are affected by CVE-2024-8448?
It affects 2 products.
Products include Planet Gs-4210-24p2s Firmware, Planet Gs-4210-24pl4c Firmware.
How do I fix CVE-2024-8448?
No fix has been published for CVE-2024-8448 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-8448 being exploited?
There is no known exploitation of CVE-2024-8448 in the wild and no public exploit code.
Other vulnerabilities in PLANET Technology GS-4210-24P2S hardware 3.0
- CVE-2024-8456 PLANET Technology switch devices - Missing Authentication for multiple HTTP routes
- CVE-2024-8458 PLANET Technology switch devices - Cross-site Request Forgery
- CVE-2024-8450 PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string
- CVE-2024-8455 PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords
- CVE-2024-8451 PLANET Technology switch devices - SSH server DoS attack
Sources
Also known as GHSA-cq83-7rf3-rgmh.