CVE-2024-8450

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-84517.5Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, aCVE-2024-84527.5Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMCVE-2024-84534.9Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers CVE-2024-84547.5The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerabiCVE-2024-84555.9The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens useCVE-2024-84569.8Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticaCVE-2024-84574.8Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote autCVE-2024-84588.8Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticaCVE-2024-84594.9Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attaCVE-2024-84605.9A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functCVE-2024-84615.3A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-binCVE-2024-84623.7A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of the file backend/wi
CVE-2024-8450: Critical severity, CVSS 9.8 | Vulnix