Description
Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users from accessing the SSH service.
Related CPE's
Vulnerable
Vulnerable
References
https://www.twcert.org.tw/en/cp-139-8052-ac0ea-2.html
Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-8051-5048e-1.html
Third Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5 · High
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2024-09-30T07:15:04.417
1 week agoLast modified
2024-10-04T15:09:42.283
4 days ago