Vulnerabilidades em Brocade

151 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2024-29963LOWBrocade SANnav contains hardcoded TLS keys used by DockerEPSS 0.2%CVE-2025-58379MEDIUMPassword Exposure in Brocade Fabric OSEPSS 0.2%CVE-2025-12679HIGHPlain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0EPSS 0.2%CVE-2025-1053HIGHBrocade SANnav encryption key is logged in the debug logsEPSS 0.2%CVE-2024-5462MEDIUMBrocade Fabric OS may capture SNMP Passwords in clear textEPSS 0.2%CVE-2023-31926HIGHArbitrary File Overwrite using less commandEPSS 0.2%CVE-2026-14442MEDIUMInformation exposure vulnerability in the job scheduling component of SANnav before 3.0.1aEPSS 0.2%CVE-2026-87426MEDIUMAn unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumeratEPSS 0.1%CVE-2026-94582MEDIUMA memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path FirsEPSS 0.1%CVE-2025-9711HIGHPrivilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2bEPSS 0.1%CVE-2026-94584LOWA race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handlEPSS 0.1%CVE-2026-87688HIGHAn input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative managementEPSS 0.1%CVE-2026-82371HIGHPlaintext exposure of sensitive authentication data in SANnav discovery service log filesEPSS 0.1%CVE-2026-87674HIGHA local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 througEPSS 0.1%CVE-2026-87676MEDIUMA stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsiEPSS 0.1%CVE-2026-87664HIGHA session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1EPSS 0.1%CVE-2024-29954MEDIUMpassword management API prints sensitive information in log filesEPSS 0.1%CVE-2026-94583LOWA race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before EPSS 0.1%CVE-2024-29952MEDIUMClear text storage of sensistive information by manipulating command variables EPSS 0.1%CVE-2024-29955MEDIUMInsertion of Sensitive Information into Brocade SANnav Log FileEPSS 0.1%