Vulnerability CVE-2024-8449


Published: 2024-09-30

Description:
Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functionality, allowing an unauthenticated attacker to connect to the device via the serial console and use this credential to reset any user's password.

 References:
https://www.twcert.org.tw/tw/cp-132-8047-adf79-1.html
https://www.twcert.org.tw/en/cp-139-8048-f0e4d-2.html

Copyright 2026, cxsecurity.com

 

Back to Top