CVE-2024-8458 PLANET Technology switch devices - Cross-site Request Forgery
An unauthenticated attacker can trick users into performing actions like creating accounts on PLANET switches via CSRF.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-8458?
CVE-2024-8458 is a high-severity vulnerability in PLANET Technology GS-4210-24P2S hardware 3.0, published on 30 Sep 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user and perform actions on their behalf, such as creating accounts.
Weakness: CWE-352
Which versions are affected by CVE-2024-8458?
It affects 2 products.
Products include Planet Gs-4210-24p2s Firmware, Planet Gs-4210-24pl4c Firmware.
How do I fix CVE-2024-8458?
No fix has been published for CVE-2024-8458 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-8458 being exploited?
There is no known exploitation of CVE-2024-8458 in the wild and no public exploit code.
Other vulnerabilities in PLANET Technology GS-4210-24P2S hardware 3.0
- CVE-2024-8456 PLANET Technology switch devices - Missing Authentication for multiple HTTP routes
- CVE-2024-8448 PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials
- CVE-2024-8450 PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string
- CVE-2024-8455 PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords
- CVE-2024-8451 PLANET Technology switch devices - SSH server DoS attack
Sources
Also known as GHSA-wwv5-q6fx-2vv9.