CVE-2024-8452CWE-327CWE-328

PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials

High · published September 30, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Weaknesses
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm; CWE-328 · Use of Weak Hash
Published
2024-09-30T07:07Z
EPSS history
Timeline
  • 30 SEP 07:07Z
    PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials
    cvelistv5