CVE-2024-5461: falha de alta gravidade em Brocade Fabric OS
Command or parameter injection via unique embedded switch SNMP commands.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.4%
Implementation of the Simple Network
Management Protocol (SNMP) operating on the Brocade 6547 (FC5022)
embedded switch blade, makes internal script calls to system.sh from
within the SNMP binary. An authenticated attacker could perform command
or parameter injection on SNMP operations that are only enabled on the
Brocade 6547 (FC5022) embedded switch. This injection could allow the
authenticated attacker to issue commands as Root.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Brocade · Brocade Fabric OSCVEs relacionadas — Brocade Fabric OS
No mesmo produto, das mais perigosas para as menos.
CVE-2019-16204—CVE-2019-16204EPSS 1.5%CVE-2019-16203—CVE-2019-16203EPSS 1.4%CVE-2023-31426MEDIUMscp, sftp, ftp servers passwords in supportsaveEPSS 0.7%CVE-2023-31430MEDIUMbuffer overflow vulnerability in “secpolicydelete” commandEPSS 0.3%CVE-2023-4163MEDIUMPossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSEPSS 0.3%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%