by Kastro
Paper/Archive/CVE-2024-29966

CVE-2024-29966

Brocade Brocade SANnav — hard-coded credentials in the documentation that appear as the appliance root password

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.2.512 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance.

Affected

ProductAffectedFixed inSource
Brocade SANnavbefore v2.3.1 and v2.3.0a–CNA
sannav< 2.3.0a2.3.0aCISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
brocade (CNA)7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.broadcom.com/external/content/SecurityAdvisories/0/23255