CVE-2024-8451

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Sep 30, 2024
Updated: Oct 4, 2024
CWE ID 400
CWE ID 280

Summary

CVE-2024-8451 is a vulnerability affecting select PLANET Technology switch models. The issue stems from the SSH service's inability to adequately authenticate connection requests, enabling unauthorized remote attackers to seize connection slots. Consequentially, legitimate users are denied access to the SSH service, leading to potential denial-of-service (DoS) attacks. This weakness can be exploited without requiring valid authentication credentials. Organizations using impacted switch models are advised to apply the forthcoming patch or implement additional security measures to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share