Vulnerability in Broadcom Brocade Sannav
CVE-2024-10405
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no customer data, no personal data and no secrets or passwords, as it travels across the network.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.002 (9.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Broadcom Brocade_sannav
- Brocade Sannav — versions Brocade SANnav before 2.3.1b
Weakness classification (CWE)
References
- sirt@brocade.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-10405?
- CVE-2024-10405 is a medium-severity vulnerability in Broadcom Brocade Sannav, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 5.3/10. Published 2025-02-15.
- How severe is CVE-2024-10405?
- Medium severity. CVSS v3 base score is 5.3 out of 10.