Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2024-8458

PLANET Technology switch devices - Cross-site Request Forgery

Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user and perform actions on their behalf, such as creating accounts.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Planet Planet Technology Corp
Products
Gs-4210-24p2s Gs-4210-24p2s Firmware Gs-4210-24pl4c and 3 more
CVE-2024-8459

PLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords

Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Planet Planet Technology Corp
Products
Gs-4210-24p2s Gs-4210-24p2s Firmware Gs-4210-24pl4c and 3 more