PT-2025-6622 · Brocade · Brocade Sannav

Published 2025-02-13 · Updated 2025-08-26 · CVE-2024-2240

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.1b

Description The Docker daemon in Brocade SANnav runs without auditing, which could allow a remote authenticated attacker to execute various attacks.

Recommendations For versions prior to 2.3.1b, update to version 2.3.1b or later to resolve the issue. As a temporary workaround, consider restricting access to the Docker daemon to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-02083

CVE-2024-2240

Affected Products

Brocade Sannav

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-2240 · Security Note
• https://bdu.fstec.ru/vul/2025-02083 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25401 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-2240 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1890265156912918567 · Twitter Post
• https://t.me/cvedetector/18066 · Telegram Post
• https://t.me/cvenotify/111342 · Telegram Post
• https://twitter.com/CVEnew/status/1890272791158747247 · Twitter Post
• https://t.me/cveNotify/133573 · Telegram Post