CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2024-8456
Severity
CRITICAL
CVSS
9.8
EPSS
0.57%
Original NVD Description
Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.
Related CVEs
Other vulnerabilities affecting the same vendor(s)