Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

PLANET Technology Switches Lack Secure SNMPv3 Authentication and Encryption

CVE-2024-8452 · published 2 years ago
Summary

PLANET Technology switches have a security weakness in their SNMPv3 service, which uses outdated methods to verify identities and protect data. This could allow unauthorized access to sensitive information. Update to the latest software to fix this issue.

What to do
  • Update planet gs-4210-24p2s_firmware to version 3.305b240802 or later.
  • Update planet gs-4210-24pl4c_firmware to version 2.305b240719 or later.
Affected software
VendorProductAffected versions
planet gs-4210-24p2s_firmware < 3.305b240802
cpe:2.3:o:planet:gs-4210-24p2s_firmware:*:*:*:*:*:*:*:*
planet gs-4210-24pl4c_firmware < 2.305b240719
cpe:2.3:o:planet:gs-4210-24pl4c_firmware:*:*:*:*:*:*:*:*
Original advisory text
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv...
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-327Use of a Broken Cryptographic Algorithm
CWE-328Use of Weak Hash
Timeline
Published30 Sep 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-8452 · NVD
Track software like this
Free during beta