CVE-2024-8454
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 30, 2024
Updated: Oct 4, 2024
CWE ID 400
CWE ID 476
Summary
CVE-2024-8454 is a newly disclosed vulnerability affecting certain PLANET Technology switch models. The swctrl service, which is used for detecting and managing these devices remotely, contains a Denial-of-Service issue. Unauthenticated attackers can exploit this vulnerability by sending specially crafted packets to crash the swctrl service, leading to a denial-of-service condition. This flaw poses a risk to network availability and may require affected devices to be updated with a patch to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.