CVE-2024-8449 — PLANET Technology switch devices - Local users' passwords recovery through hard-coded credentials
Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device…
Published: 2024-09-30 · CVSS: 6.8 · CVSS 3.1
Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7