CVE-2024-2740 HIGH

CVE-2024-2740: Exposure of Sensitive Information to an Unauthorized Actor in Planet IGS-4215-16T2S

Vendor Planet
Product IGS-4215-16T2S
Weakness CWE-200 · Info exposure
Published March 21, 2024
Last update August 13, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to access some administrative resources due to lack of proper management of the Switch web interface.

Key dates

02Disclosure timeline

March 21, 2024 CVE published
August 13, 2024 Record updated