CVE-2024-10403

HIGH

Brocade Fabric OS <8.2.3e2, 9.0.0-9.2.0c, 9.2.1-9.2.1a - Info Discl...

Title source: llm

Description

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.

References (1)

[Vendor Advisory] https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25145

Scores

CVSS v3 7.5

EPSS 0.0015

EPSS Percentile 35.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-528 CWE-552

Status published

Products (1)

broadcom/fabric_operating_system < 9.2.0c1

Published Nov 21, 2024

Tracked Since Feb 18, 2026