Vulnerability · Published Sep 30, 2024 · Assigned by twcert

CVE-2024-8455PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords

High 8.1

In plain English

A high-severity security flaw in GS-4210-24P2S hardware 3.0 from PLANET Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.3%top 72.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets can directly crack them to obtain plaintext passwords.

Affected products (as reported)

Vendor	Product	Versions
PLANET Technology	GS-4210-24PL4C hardware 2.0	0 – before 2.305b240719
PLANET Technology	GS-4210-24P2S hardware 3.0	0 – before 3.305b240802
PLANET Technology	IGS-5225-4UP1T2S hardware 1.0	0

Weakness: CWE-261 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.twcert.org.tw/tw/cp-132-8059-bde5f-1.html third-party-advisory
https://www.twcert.org.tw/en/cp-139-8060-f3955-2.html third-party-advisory