Description

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

Related CPE's

o

planet

gs-4210-24p2s_firmware

Vulnerable

h

planet

gs-4210-24p2s

3.0

o

planet

gs-4210-24pl4c_firmware

Vulnerable

h

planet

gs-4210-24pl4c

2.0

References

https://www.twcert.org.tw/en/cp-139-8050-52f32-2.html

Third Party Advisory

https://www.twcert.org.tw/tw/cp-132-8049-83fe4-1.html

Third Party Advisory

Weaknesses

[email protected]

Secondary
CWE-798

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

8.6 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-09-30T05:15:04.170Z

1 year ago

Last modified

2024-10-04T13:08:58.820Z

1 year ago