by Kastro
Paper/Archive/CVE-2025-7398

CVE-2025-7398

Broadcom Brocade ASCG — Medium Strength Cipher Suites detected on port on ports 9000 and 8036

EPSS 0.2%CVSS 9.1
critical.is priorityof 100
29
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 7.9.079 × 201.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and 8036.

Affected

ProductAffectedFixed inSource
Brocade ASCGbefore 3.3.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
brocade (CNA)8.6CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35950