CVE-2024-8455
Planet
CVE-2024-8455 is a security vulnerability affecting PLANET Technology devices, specifically related to the swctrl service. This service, designed for remote management, uses weakly encoded authentication tokens derived from user passwords. Due to this insufficient encryption, attackers intercepting network traffic can easily crack these tokens to reveal plaintext passwords. The SOCRadar Vulnerability Risk Score (SVRS) for CVE-2024-8455 is 56, indicating a medium level of risk. Although not critical (SVRS > 80), this vulnerability could allow unauthorized remote access to affected devices. This poses a significant risk, especially for devices deployed in sensitive network environments. Immediate mitigation steps should be considered to protect against potential exploitation. Successful exploitation leads to complete compromise of the device and network.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.