CVE-2024-8450
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Sep 30, 2024
Updated: Oct 4, 2024
CWE ID 798
Summary
CVE-2024-8450 is a newly discovered vulnerability affecting certain switch models from PLANET Technology. The issue stems from a hard-coded community string in the SNMPv1 service, which is accessible remotely. Unauthorized attackers can exploit this vulnerability to gain read-write privileges to the SNMPv1 service, potentially leading to significant network disruptions or data breaches. It is recommended that affected organizations immediately update their switch firmware to resolve this security weakness and secure their networks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.