Advisories · Technology

PLANET Technology GS-4210-24P2S hardware 3.0.

Every CVE that names PLANET Technology GS-4210-24P2S hardware 3.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-8459 CVE record

CVSS 7.2 High

PLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Information disclosure
Not analysed yet 30 Sept 2024
CVE-2024-8458 CVE record

CVSS 8.8 High

PLANET Technology switch devices - Cross-site Request Forgery
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Cross-site request forgery (CSRF)
Not analysed yet 30 Sept 2024
CVE-2024-8457 CVE record

CVSS 4.8 Medium

PLANET Technology switch devices - Stored cross-site scripting (XSS) in the User Management
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2024
CVE-2024-8456 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

PLANET Technology switch devices - Missing Authentication for multiple HTTP routes
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Authentication bypass
Not analysed yet 30 Sept 2024
CVE-2024-8455 CVE record

CVSS 8.1 High

PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- CWE-261
Not analysed yet 30 Sept 2024
CVE-2024-8454 CVE record

CVSS 5.3 Medium

PLANET Technology switch devices - Swctrl service DoS attack
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Denial of service
- Memory corruption
Not analysed yet 30 Sept 2024
CVE-2024-8453 CVE record

CVSS 4.9 Medium

PLANET Technology switch devices - Weak hash for users' passwords
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Weak cryptography or TLS
- CWE-759
Not analysed yet 30 Sept 2024
CVE-2024-8452 CVE record

CVSS 7.5 High

PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Weak cryptography or TLS
Not analysed yet 30 Sept 2024
CVE-2024-8451 CVE record

CVSS 7.5 High

PLANET Technology switch devices - SSH server DoS attack
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Denial of service
- CWE-280
Not analysed yet 30 Sept 2024
CVE-2024-8450 CVE record

CVSS 8.6 High

PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Hard-coded credentials
Not analysed yet 30 Sept 2024
CVE-2024-8449 CVE record

CVSS 6.8 Medium

PLANET Technology switch devices - Local users' passwords recovery through hard-coded credentials
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Hard-coded credentials
Not analysed yet 30 Sept 2024
CVE-2024-8448 CVE record

CVSS 8.8 High

PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- Hard-coded credentials
Not analysed yet 30 Sept 2024