GS-4210-24P2S hardware 3.0 vulnerabilities
7 known vulnerabilities in GS-4210-24P2S hardware 3.0 from PLANET Technology. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
GS-4210-24PL4C hardware 2.0: Cross-Site Request Forgery
Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user an
- 9.8 Critical severity
GS-4210-24PL4C hardware 2.0: Missing Authentication for Critical Functionality
Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the d
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Uncontrolled Resource Consumption
The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Use of a Broken or Risky Cryptographic Algorithm
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Improper Handling of Insufficient Permissions or Privileges
Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users f
- 9.8 Critical severity
GS-4210-24PL4C hardware 2.0: Use of Hard-coded Credentials
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
- 8.8 High severity
GS-4210-24PL4C hardware 2.0: Use of Hard-coded Credentials
Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.