PT-2024-39023 · Planet Technology · Planet Technology Switch
CVE-2024-8453
·
Published
2024-09-30
·
Updated
2024-10-04
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
PLANET Technology switch models (affected versions not specified)
Description:
The issue concerns the use of an insecure hashing function to hash user passwords without salting. Remote attackers with administrator privileges can read configuration files to obtain the hash values and potentially crack them to retrieve the plaintext passwords.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Planet Technology Switch