TVN ID	TVN-202409006
CVE ID	CVE-2024-8450
CVSS	8.6 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected Products	GS-4210-24PL4C hardware 2.0 GS-4210-24P2S hardware 3.0
Description	Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
Solution	Update firmware of GS-4210-24PL4C hardware 2.0 to version 2.305b240719 or later. Update firmware of GS-4210-24P2S hardware 3.0 to version 3.305b240802 or later.
Credit	Agenzia per la Cybersicurezza Nazionale (ACN)
Public Date	2024-09-30