WID-SEC-W-2025-0367

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Broadcom Brocade SANnav: Mehrere Schwachstellen

view advisory published 2025-02-13

Ein Angreifer kann mehrere Schwachstellen in Broadcom Brocade SANnav ausnutzen, um Informationen preiszugeben, Daten zu manipulieren und nicht spezifizierte Aktionen durchzuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-4282UScritical9.8OT elevated—
Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.
CVE-2024-10405USmedium5.3OT elevated—
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that include…
CVE-2024-2240UShigh7.2—
Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks.
CVE-2025-1053USmedium4.9—
Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with p…
CVE-2024-10404USmedium4.4OT elevated—
CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could allow an authenticated, local attacker to view Brocade Fab…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan