Description

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

Related CPE's

o

planet

gs-4210-24p2s_firmware

Vulnerable

h

planet

gs-4210-24p2s

3.0

o

planet

gs-4210-24pl4c_firmware

Vulnerable

h

planet

gs-4210-24pl4c

2.0

References

https://www.twcert.org.tw/en/cp-139-8050-52f32-2.html

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-8049-83fe4-1.html

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-798

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-09-30T07:15:04.170

1 week ago

Last modified

2024-10-04T15:08:58.820

1 week ago