CVE-2024-4282CWE-327

Weak TLS Ciphers on Brocade SANnav OVA SSH port 22

High · published February 14, 2025

CVSS v4.0
8.2
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

⚡ An outdated SHA1 setting for SSH in Brocade SANnav could leave your data feeling a little too exposed! It's like using a rusty old lock on your front door — it may still work, but any crafty burglar can easily pick it! An attacker could exploit this vulnerability to intercept sensitive communications or gain unauthorized access, potentially leading to data leaks or malicious control over your storage environment. In a world where data security is paramount, this could spell disaster!

Put simply

It's like using a rusty old lock on your front door — it may still work, but any crafty burglar can easily pick it! Brocade SANnav OVA before version 2.3.1b allows the use of the deprecated SHA1 algorithm for SSH communications on port 22, making it susceptible to various attacks that exploit weak cryptography.

What to do

An attacker could exploit this vulnerability to intercept sensitive communications or gain unauthorized access, potentially leading to data leaks or malicious control over your storage environment. In a world where data security is paramount, this could spell disaster! Upgrade to Brocade SANnav 2.3.1b or later to eliminate this vulnerability. Additionally, consider disabling the SHA1 setting and enforcing stronger encryption protocols to further enhance security. You've got this! With these steps, you'll be back on track to securing your data in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-02-14T23:33Z
EPSS history
Timeline
  • 14 FEB 23:33Z
    Weak TLS Ciphers on Brocade SANnav OVA SSH port 22
    cvelistv5