CVE-2024-8451: Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing…

PriorityP341high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

EPSS

0.53%

40.6th percentile

Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users from accessing the SSH service.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
planet	gs-4210-24p2s_firmware	< 3.305b240802	3.305b240802
planet	gs-4210-24pl4c_firmware	< 2.305b240719	2.305b240719
planet_technology	gs-4210-24p2s_hardware_3.0	< 3.305b240802	3.305b240802
planet_technology	gs-4210-24pl4c_hardware_2.0	< 2.305b240719	2.305b240719

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.