PT-2025-6497 · Brocade · Brocade Fabric Os+1

Published 2025-02-13 · Updated 2025-08-26 · CVE-2024-10405

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.1b

Description The issue allows an attacker to read the Brocade SANnav data stream, which includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, and IP Addresses, as it travels across the network. This is due to the enablement of weak TLS ciphers on ports 443 and 18082. No customer data, personal data, secrets, or passwords are exposed.

Recommendations For Brocade SANnav versions prior to 2.3.1b, update to version 2.3.1b or later to resolve the issue. As a temporary workaround, consider restricting access to ports 443 and 18082 to minimize the risk of exploitation.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2025-02105

CVE-2024-10405

Affected Products

Brocade Fabric Os

Brocade Sannav

References · 7

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25402 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-10405 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02105 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10405 · Security Note
• https://twitter.com/CVEnew/status/1890545812691906722 · Twitter Post
• https://t.me/cvedetector/18149 · Telegram Post
• https://t.me/cveNotify/133574 · Telegram Post