Vulnerabilidades em Brocade

81 resultados
Análise Vexday

Com 81 CVEs catalogadas e nenhuma surgida nos últimos 90 dias, o perfil histórico da Brocade apresenta volume moderado, mas a taxa de exploração ativa merece atenção: 1,23% das CVEs constam no catálogo KEV da CISA, o que representa 2,7 vezes a média geral do catálogo — indicador de que vulnerabilidades nesse ecossistema têm histórico desproporcional de aproveitamento real. A CVE mais perigosa em exploração ativa no momento é CVE-2025-1976, com score EPSS de 0,0074, e embora não haja CVEs de severidade crítica nem provas de conceito públicas conhecidas no conjunto atual, a ausência desses fatores não neutraliza o risco dado o padrão de exploração observado. O tipo de falha mais comum, CWE-312 (armazenamento de informações sensíveis em texto claro), sugere atenção a controles de proteção de dados em repouso e em trânsito em implantações Brocade. Equipes de segurança devem priorizar a verificação do status de CVE-2025-1976 em seus ambientes, mesmo diante do EPSS relativamente baixo, considerando o histórico elevado de exploração ativa do vendor.

CVE-2023-31928MEDIUMXSS vulnerability in Brocade WebtoolsEPSS 0.5%CVE-2024-29959HIGHBrocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support saveEPSS 0.5%CVE-2022-43934MEDIUMWeak Key-exchange algorithmsEPSS 0.5%CVE-2024-4161HIGHSyslog traffic sent in clear-textEPSS 0.5%CVE-2024-29968HIGHSQL Table names, column names, and SQL queries are collected in DR standby SupportsaveEPSS 0.5%CVE-2022-33187MEDIUMBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logsEPSS 0.5%CVE-2022-43937MEDIUMBrocade SANnav Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-5461HIGHCommand or parameter injection via unique embedded switch SNMP commands.EPSS 0.4%CVE-2024-29965MEDIUMInsecure backupEPSS 0.4%CVE-2026-0869HIGHApplication User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0EPSS 0.4%CVE-2024-1509HIGHBrocade ASCG 3.2.0 web interface does not enforce HSTS, as defined by RFC 6797 for ports 8030 and 8100EPSS 0.4%CVE-2025-12773HIGHPlain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0aEPSS 0.3%CVE-2024-29960MEDIUMIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)EPSS 0.3%CVE-2024-29950HIGHBrocade SANnav before v2.3.1, v2.3.0a uses weak encryptionEPSS 0.3%CVE-2024-29957HIGHEncryption key is stored in the DR log filesEPSS 0.3%CVE-2024-29953MEDIUMEncoded session passwords on session storage for Virtual Fabric platformsEPSS 0.3%CVE-2023-3489HIGHfirmwaredownload command could log servers passwords in clear textEPSS 0.3%CVE-2024-29969HIGHTLS/SSL weak message authentication code ciphers are added by default for port 18082EPSS 0.3%CVE-2024-29958HIGHEncryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.EPSS 0.3%CVE-2024-29956MEDIUMcleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnavEPSS 0.3%