VulnerabilityAnalyzed

CVE-2024-29965

A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.

MEDIUM 5.9EPSS 0.41%

Does this matter?

Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.

Description

In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface ("SSH"). The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches.

CVSS 3.1: 5.9 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
EPSS: 0.41% probability · 35th percentile
CISA KEV: Not listed
Weakness: CWE-922
Affected: broadcom/brocade sannav
Source: sirt@brocade.com

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23250Vendor Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23250Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.