CVE-2024-2742 MEDIUM

CVE-2024-2742: OS Command Injection in Planet IGS-4215-16T2S

Vendor Planet
Product IGS-4215-16T2S
Weakness CWE-78
Published March 21, 2024
Last update August 13, 2024
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Operating system command injection vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. An authenticated attacker could execute arbitrary code on the remote host by exploiting IP address functionality.

Key dates

02Disclosure timeline

March 21, 2024 CVE published
August 13, 2024 Record updated