CVE-2024-8459CWE-312

PLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords

High · published September 30, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configuration files, allowing remote attackers with administrator privileges to read the file and obtain the credentials.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-09-30T07:59Z
EPSS history
Timeline
  • 30 SEP 07:59Z
    PLANET Technology switch devices - Cleartext storage of SNMPv3 users' passwords
    cvelistv5