TVN ID	TVN-202409010
CVE ID	CVE-2024-8454
CVSS	5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products	GS-4210-24PL4C hardware 2.0 GS-4210-24P2S hardware 3.0 IGS-5225-4UP1T2S hardware 1.0
Description	The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service.
Solution	Update firmware of GS-4210-24PL4C hardware 2.0 to version 2.305b240719 or later. Update firmware of GS-4210-24P2S hardware 3.0 to version 3.305b240802 or later. IGS-5225-4UP1T2S hardware 1.0 has reached End of Life (EOL). Replacement is recommended.
Credit	Agenzia per la Cybersicurezza Nazionale (ACN)
Public Date	2024-09-30