CVE-2024-8454CWE-400CWE-476

PLANET Technology switch devices - Swctrl service DoS attack

Medium · published September 30, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Weaknesses
CWE-400 · Uncontrolled Resource Consumption; CWE-476 · NULL Pointer Dereference
Published
2024-09-30T07:18Z
EPSS history
Timeline
  • 30 SEP 07:18Z
    PLANET Technology switch devices - Swctrl service DoS attack
    cvelistv5