What is CVE-2018-6445?

CVE-2018-6445 is a high-severity vulnerability in Brocade Network Advisor. CVSS score: 7.5/10. Published 2019-01-22.

How severe is CVE-2018-6445?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Brocade Network Advisor

CVE-2018-6445

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.

Published 2019-01-22 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.017 (75.9th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 76th percentile — 75.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000

Affected products

Brocade Network Advisor
Brocade Communications Systems, Inc. Network Advisor — versions All versions prior to version 14.0.3
NetApp Brocade Network Advisor

References

www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-s… (Vendor Advisory)
security.netapp.com/advisory/ntap-20190411-0005/ (Third Party Advisory)
support.lenovo.com/us/en/product_security/LEN-25655

Frequently asked questions

What is CVE-2018-6445?: CVE-2018-6445 is a high-severity vulnerability in Brocade Network Advisor. CVSS score: 7.5/10. Published 2019-01-22.
How severe is CVE-2018-6445?: High severity. CVSS v3 base score is 7.5 out of 10.