Description
Brocade Fabric OS versions before
8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can
capture the SFTP/FTP server password used for a firmware download
operation initiated by SANnav or through WebEM in a weblinker core dump
that is later captured via supportsave.
Published: 2024-11-21
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-33422 Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.
History

Tue, 04 Feb 2025 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Broadcom
Broadcom fabric Operating System
Weaknesses CWE-552
CPEs cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
Vendors & Products Broadcom
Broadcom fabric Operating System
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Thu, 21 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 21 Nov 2024 06:00:00 +0000

Type Values Removed Values Added
Description Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.
Title SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
Weaknesses CWE-528
References
Metrics cvssV4_0

{'score': 5.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Broadcom Fabric Operating System
cve-icon MITRE

Status: PUBLISHED

Assigner: brocade

Published:

Updated: 2024-11-21T17:53:51.483Z

Reserved: 2024-10-25T23:28:02.085Z

Link: CVE-2024-10403

cve-icon Vulnrichment

Updated: 2024-11-21T17:53:48.696Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-21T11:15:16.533

Modified: 2025-02-04T15:28:04.053

Link: CVE-2024-10403

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses