CVE-2024-10403
Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later captured via supportsave.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.9
- CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.65%
- CWE
- CWE-528
- Published
- 2024-11-21
- Last modified
- 2026-03-13
Affected products
- Brocade Fabric OS
Weakness type
Related vulnerabilities
- CVE-2025-48928 — The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content...