QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-8454

Back to search

CVE-2024-8454

Published: Sep 30, 2024

Modified: Sep 30, 2024

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.

VendorProductVersions

PLANET Technology

GS-4210-24PL4C hardware 2.0

affected
0 - < 2.305b240719

PLANET Technology

GS-4210-24P2S hardware 3.0

affected
0 - < 3.305b240802

PLANET Technology

IGS-5225-4UP1T2S hardware 1.0

affected
0

Weaknesses (CWE)

CWE-476
CWE-400

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now