Vulnerabilidades em Brocade

151 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2026-94579MEDIUMAn OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session terminEPSS 3.1%CVE-2026-87666HIGHAn OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.EPSS 2.6%CVE-2026-87680HIGHA command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated uEPSS 1.9%CVE-2026-87673HIGHAn OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d anEPSS 1.8%CVE-2026-87682HIGHMultiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versionEPSS 1.7%CVE-2019-16204—Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keEPSS 1.5%CVE-2026-94581HIGHAn OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thrEPSS 1.5%CVE-2026-94586HIGHA command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operationEPSS 1.4%CVE-2019-16203—Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are giveEPSS 1.4%CVE-2023-3454HIGHRemote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary codEPSS 1.2%CVE-2023-31424HIGHWeb authentication and authorization bypassEPSS 0.9%CVE-2024-2859MEDIUMBy default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)EPSS 0.8%CVE-2026-87665MEDIUMA stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions beforEPSS 0.8%CVE-2022-43936MEDIUMBrocade Fabric OS switch passwords when debugging is enabledEPSS 0.8%CVE-2024-29961HIGHsupply-chain attack riskEPSS 0.8%CVE-2025-1976HIGHCode injection exposure in Fabric OS 9.1.0 through 9.1.1d6EPSS 0.7%KEVCVE-2026-87663HIGHAn authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versioEPSS 0.7%CVE-2026-87675HIGHAn OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.EPSS 0.7%CVE-2023-31426MEDIUMscp, sftp, ftp servers passwords in supportsaveEPSS 0.7%CVE-2024-10403MEDIUMSFTP/FTP password could be captured in plain text in Supportsave generated from SANnavEPSS 0.7%