CVE-2024-5461highCWE-78

CVE-2024-5461: high-severity vulnerability in Brocade Fabric OS

Command or parameter injection via unique embedded switch SNMP commands.

Published · Updated

Follow this CVE+ Monitor Fabric OS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.4%
Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. This injection could allow the authenticated attacker to issue commands as Root.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Brocade · Brocade Fabric OS
Related CVEs — Brocade Fabric OS

In the same product, most dangerous first.

CVE-2019-16204—CVE-2019-16204EPSS 1.5%CVE-2019-16203—CVE-2019-16203EPSS 1.4%CVE-2023-31426MEDIUMscp, sftp, ftp servers passwords in supportsaveEPSS 0.7%CVE-2023-31430MEDIUMbuffer overflow vulnerability in “secpolicydelete” commandEPSS 0.3%CVE-2023-4163MEDIUMPossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSEPSS 0.3%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%