{"id":"CVE-2024-7516","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-7516","generatedAt":"2026-10-28T02:10:06.210Z","title":"A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is…","description":"A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a switch admin.","published":"2024-11-12T19:15:19.000Z","lastModified":"2026-06-17T08:20:21.000Z","status":"Analyzed","sourceIdentifier":"sirt@brocade.com","cvss":{"version":"4.0","score":7,"severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-322","CWE-306"],"affected":["broadcom/fabric operating system"],"epss":{"score":0.00257,"percentile":0.1716,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25177","tags":["Vendor Advisory"],"source":"sirt@brocade.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-7516","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}