Skip to content
Sign in
5.3 Medium

CVE-2024-5462 If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the…

Description

If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords is not enabled. An attacker can use these passwords to fetch values of the supported OIDs via SNMPv3 queries. There are also a limited number of MIB objects that can be modified.

Affected products and versions

Product Affected versions Fixed in
Brocade Fabric OS Versions not published

Other CVEs of Brocade Fabric OS

The 8 CVEs of Brocade Fabric OS →
CVE-2024-5461 Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch… 8.6 High CVE-2023-4163 In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition,… 4.4 Medium CVE-2023-31430 A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and… 5.5 Medium CVE-2023-31426 The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0… 6.8 Medium
Track this CVE