Vulnerability · Published Feb 14, 2025 · Assigned by brocade
CVE-2024-10405Weak TLS Ciphers on Brocade SANnav port 443 & 18082
Medium 6.9
In plain English
A medium-severity broken cryptography in Brocade SANnav from Brocade. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Official description
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no customer data, no personal data and no secrets or passwords, as it travels across the network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Brocade | Brocade SANnav | Brocade SANnav before 2.3.1b |
Weakness: CWE-327 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N