CVE-2024-8458: Planet Gs-4210-24p2s Firmware

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user and perform actions on their behalf, such as creating accounts.

Affected products

• Planet Gs-4210-24p2s Firmware: before 3.305b240802 (fixed in 3.305b240802)
• Planet Gs-4210-24pl4c Firmware: before 2.305b240719 (fixed in 2.305b240719)

Published 2024-09-30. Last modified 2026-06-17.