CVE-2024-8450: Planet Gs-4210-24p2s Firmware
Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
Affected products
- Planet Gs-4210-24p2s Firmware: before 3.305b240802 (fixed in 3.305b240802)
- Planet Gs-4210-24pl4c Firmware: before 2.305b240719 (fixed in 2.305b240719)
Published 2024-09-30. Last modified 2026-06-17.