CVE-2024-8452
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 30, 2024
Updated: Oct 4, 2024
CWE ID 328
CWE ID 327
Summary
CVE-2024-8452 is a vulnerability affecting certain PLANET Technology switch models. The issue lies in the SNMPv3 service, which supports outdated authentication and encryption protocols. An attacker can exploit this weakness to obtain plaintext SNMPv3 credentials, posing a significant security risk. Organizations using these vulnerable switches are advised to update their firmware to address this issue and implement stronger authentication and encryption protocols. Failure to do so may result in unauthorized access to network management information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.