PT-2024-21879 · Planet · Planet Igs-4215-16T2S

Dan1T0 + 1 · Published 2024-03-21 · Updated 2024-04-11 · CVE-2024-2741

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Planet IGS-4215-16T2S version 1.305b210528

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that could allow a remote attacker to trick some authenticated users into performing actions in their session. This includes actions such as adding or updating accounts through the Switch web interface.

Recommendations For Planet IGS-4215-16T2S version 1.305b210528, consider disabling access to the web interface until a patch is available to prevent exploitation of the CSRF vulnerability. Restrict access to the Switch web interface to minimize the risk of unauthorized account modifications.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-2741

Affected Products

Planet Igs-4215-16T2S

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-2741 · Security Note
• https://twitter.com/CVEnew/status/1770780525361250781 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-planet-igs-4215-16t2s · Note