Hard-coded Credential in CLI Threatens Linux Root Access

CVE-2024-8448

What is CVE-2024-8448?

A vulnerability exists in certain switch models from PLANET Technology where a hard-coded credential is present within the command-line interface. This security flaw enables remote attackers with standard privileges to access the system using the built-in credentials, potentially providing them with a Linux root shell. This could lead to unauthorized control over the affected devices and exploitation of sensitive network configurations.

References