CVE-2024-5462mediumCWE-319

CVE-2024-5462: falha de média gravidade em Brocade Fabric OS

Brocade Fabric OS may capture SNMP Passwords in clear text

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Fabric OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords is not enabled. An attacker can use these passwords to fetch values of the supported OIDs via SNMPv3 queries. There are also a limited number of MIB objects that can be modified.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Brocade · Brocade Fabric OS
CVEs relacionadas — Brocade Fabric OS

No mesmo produto, das mais perigosas para as menos.

CVE-2019-16204—CVE-2019-16204EPSS 1.5%CVE-2019-16203—CVE-2019-16203EPSS 1.4%CVE-2023-31426MEDIUMscp, sftp, ftp servers passwords in supportsaveEPSS 0.7%CVE-2024-5461HIGHCommand or parameter injection via unique embedded switch SNMP commands.EPSS 0.4%CVE-2023-31430MEDIUMbuffer overflow vulnerability in “secpolicydelete” commandEPSS 0.3%CVE-2023-4163MEDIUMPossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSEPSS 0.3%