CVE-2024-10405CWE-327

Weak TLS Ciphers on Brocade SANnav port 443 & 18082

Medium · published February 14, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

Brocade SANnav before SANnav 2.3.1b

enables weak TLS ciphers on ports 443 and 18082. In case of a successful

exploit, an attacker can read Brocade SANnav data stream that includes

monitored Brocade Fabric OS switches performance data, port status,

zoning information, WWNs, IP Addresses, but no customer data, no

personal data and no secrets or passwords, as it travels across the

network.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-02-14T23:23Z
EPSS history
Timeline
  • 14 FEB 23:23Z
    Weak TLS Ciphers on Brocade SANnav port 443 & 18082
    cvelistv5