CVE-2024-5460

Brocade Fabric OS versions prior to v9.0 have default community strings

State: Published
Severity: 8.1 High
Published: Jun 25, 2024
Updated: Aug 1, 2024
Reserved: May 29, 2024

Description

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community string in the configuration file for the SNMP daemon. An attacker could exploit this vulnerability by using the static community string in SNMP version 1 queries to an affected device.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	brocade

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Fabric OSBrocade	prior to v9.0.0Affected

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24409

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.