PLANET Technology Switches Vulnerable to CSRF Attacks

CVE-2024-8458

What is CVE-2024-8458?

Certain models of network switches from PLANET Technology are exposed to a Cross-Site Request Forgery (CSRF) vulnerability in their web application interface. This flaw permits an unauthenticated remote attacker to deceive a user into visiting a malicious web page, effectively allowing the attacker to execute commands under the guise of the user. This could lead to unauthorized actions, such as the creation of user accounts or alteration of configurations, thereby compromising the security and integrity of the affected devices.

References