Vulnerabilities > CVE-2024-4159 - Unspecified vulnerability in Broadcom Brocade Sannav

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

broadcom

NVD

Published: 2024-04-25

Updated: 2025-02-06

Summary

Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthenticated attacker to sniff the SANnav Docker information.

Vulnerable Configurations

Part	Description	Count
Application	Broadcom Broadcom Brocade Sannav - Broadcom Brocade Sannav 1.1.0 Broadcom Brocade Sannav 1.1.1 Broadcom Brocade Sannav 2.0 Broadcom Brocade Sannav 2.1.0 Broadcom Brocade Sannav 2.1.1 Broadcom Brocade Sannav 2.2.0 Broadcom Brocade Sannav 2.2.1 Broadcom Brocade Sannav 2.2.2 Broadcom Brocade Sannav 2.2.2A Broadcom Brocade Sannav 2.3.0	11

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23282
https://support.broadcom.com/external/content/SecurityAdvisories/0/23282