Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-8454

PLANET Technology switch devices - Swctrl service DoS attack

The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Planet Planet Technology Corp
Products
Gs-4210-24p2s Gs-4210-24p2s Firmware Gs-4210-24pl4c and 4 more
CVE-2024-8455

PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets can directly crack them to obtain plaintext passwords.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Planet Planet Technology Corp
Products
Gs-4210-24p2s Gs-4210-24p2s Firmware Gs-4210-24pl4c and 6 more