CVE-2024-5461highCWE-78

CVE-2024-5461: fallo de gravedad alta en Brocade Fabric OS

Command or parameter injection via unique embedded switch SNMP commands.

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Fabric OS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.6epss 0.4%
Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. This injection could allow the authenticated attacker to issue commands as Root.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Brocade · Brocade Fabric OS
CVEs relacionadas — Brocade Fabric OS

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-16204—CVE-2019-16204EPSS 1.5%CVE-2019-16203—CVE-2019-16203EPSS 1.4%CVE-2023-31426MEDIUMscp, sftp, ftp servers passwords in supportsaveEPSS 0.7%CVE-2023-31430MEDIUMbuffer overflow vulnerability in “secpolicydelete” commandEPSS 0.3%CVE-2023-4163MEDIUMPossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSEPSS 0.3%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%