CVE-2024-5460CWE-798

Brocade Fabric OS versions prior to v9.0 have default community strings

High · published June 25, 2024

CVSS v3.1
8.1
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

A vulnerability in the default configuration of the Simple Network

Management Protocol (SNMP) feature of Brocade Fabric OS versions before

v9.0.0 could allow an authenticated, remote attacker to read data from

an affected device via SNMP. The vulnerability is due to hard-coded,

default community string in the configuration file for the SNMP daemon.

An attacker could exploit this vulnerability by using the static

community string in SNMP version 1 queries to an affected device.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2024-06-25T23:58Z
EPSS history
Timeline
  • 25 JUN 23:58Z
    Brocade Fabric OS versions prior to v9.0 have default community strings
    cvelistv5