Vulnerabilidades em Brocade

151 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2024-29966HIGHhard-coded credentials in the documentation that appear as the appliance root passwordEPSS 0.7%CVE-2023-31927MEDIUMAn information disclosure in the web interface of Brocade Fabric OSEPSS 0.6%CVE-2025-58382HIGHPrivilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2aEPSS 0.6%CVE-2024-7517HIGHPrivileged escalation via crafted use of portcfg commandEPSS 0.6%CVE-2026-87677MEDIUMAn OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 throEPSS 0.6%CVE-2026-82370HIGHUnauthenticated remote command injection in the Brocade SANnav orchestrator HTTP serviceEPSS 0.6%CVE-2024-4173HIGHSANnav versions exposes Kafka in the wan interface.EPSS 0.6%CVE-2026-87684HIGHA stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When procesEPSS 0.6%CVE-2024-5460HIGHBrocade Fabric OS versions prior to v9.0 have default community stringsEPSS 0.5%CVE-2025-58383HIGHPrivilege escalation via bind command in Brocade Fabric OSEPSS 0.5%CVE-2022-43937MEDIUMBrocade SANnav Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-29964MEDIUMBrocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker filesEPSS 0.5%CVE-2024-4159MEDIUMProtection mechanismsEPSS 0.5%CVE-2024-2240HIGHDocker implementation in Brocade SANnav is missing Audit Rules.EPSS 0.5%CVE-2022-33187MEDIUMBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logsEPSS 0.5%CVE-2023-31928MEDIUMXSS vulnerability in Brocade WebtoolsEPSS 0.5%CVE-2026-87683HIGHMultiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.EPSS 0.5%CVE-2022-43934MEDIUMWeak Key-exchange algorithmsEPSS 0.5%CVE-2024-29959HIGHBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support saveEPSS 0.5%CVE-2024-4161HIGHSyslog traffic sent in clear-textEPSS 0.5%