by Kastro
Paper/Archive/CVE-2024-4173

CVE-2024-4173

Brocade Brocade SANnav — SANnav versions exposes Kafka in the wan interface.

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.1.481 × 209.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.

Affected

ProductAffectedFixed inSource
Brocade SANnavAll Versions–CNA
sannavall versions–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
brocade (CNA)7.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.broadcom.com/external/content/SecurityAdvisories/0/23285