CVE-2024-8448CWE-798

PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials

High · published September 30, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.1th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-09-30T06:36Z
EPSS history
Timeline
  • 30 SEP 06:36Z
    PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials
    cvelistv5