Attackers Can Gain Full Control of Devices Through Firmware Upload and Download Vulnerability

CVE-2024-8456

What is CVE-2024-8456?

Certain models of switches by PLANET Technology have been found to have a vulnerability related to inadequate access controls in their firmware management functions. This flaw permits remote attackers to bypass authentication, enabling them to upload and download firmware as well as system configuration files. Successful exploitation of this vulnerability can result in attackers gaining complete control over the affected devices, leading to potential data breach and network compromise. Administrators are strongly advised to review their device settings and implement appropriate security measures to mitigate risks associated with this vulnerability.

References