CVE-2025-7398CWE-326

Medium Strength Cipher Suites detected on port on ports 9000 and 8036

High · published July 17, 2025

CVSS v4.0
8.6
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

⚡ Medium strength cryptography lurks behind internal ports on Brocade ASCG versions before 3.3.0, just waiting for a security hero to step in! 🔥 Think of it as a bank vault that uses an outdated lock — it may keep the casual thief out, but a determined attacker with the right tools can crack it with ease. Those internal ports are like secret doors that, if left unsecured, could lead to compromising sensitive data! An attacker could exploit this vulnerability to intercept and manipulate sensitive information being transmitted over these internal ports, potentially leading to severe data breaches or unauthorized access. This could be absolutely devastating for an organization relying on strong data encryption to safeguard their operations.

Put simply

Think of it as a bank vault that uses an outdated lock — it may keep the casual thief out, but a determined attacker with the right tools can crack it with ease. Those internal ports are like secret doors that, if left unsecured, could lead to compromising sensitive data! Brocade ASCG versions prior to 3.3.0 allow for the use of medium strength cryptography algorithms on internal ports 9000 and 8036, making it easier for attackers to decrypt and exploit data they intercept.

What to do

An attacker could exploit this vulnerability to intercept and manipulate sensitive information being transmitted over these internal ports, potentially leading to severe data breaches or unauthorized access. This could be absolutely devastating for an organization relying on strong data encryption to safeguard their operations. Upgrade your Brocade ASCG to version 3.3.0 or later to disable the use of weak cryptographic algorithms. Additionally, consider reviewing your security policies to ensure that strong encryption practices are enforced across all internal communications. You’ve got this! With these fixes, you’ll fortify your systems and keep the bad guys at bay. 🛡️

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2025-07-17T21:28Z
EPSS history
Timeline
  • 17 JUL 21:28Z
    Medium Strength Cipher Suites detected on port on ports 9000 and 8036
    cvelistv5