Brocade vulnerabilities
151 CVEs and advisories name Brocade as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-29958Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node.
- CVE-2024-29957Encryption key is stored in the DR log files
- CVE-2024-29956cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav
- CVE-2024-29955Insertion of Sensitive Information into Brocade SANnav Log File
- CVE-2024-29952Clear text storage of sensistive information by manipulating command variables
- CVE-2024-29951Brocade SANnav has weak encryption in internal SSH ports
- CVE-2024-29950Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption
- CVE-2023-5973Truncated port name
- CVE-2023-3454Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary cod
- CVE-2021-27795License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,
- CVE-2023-31424Web authentication and authorization bypass
- CVE-2023-31423Possible information exposure through log file vulnerability
- CVE-2023-31925Storage of clear text password in Brocade SANnav
- CVE-2023-4162Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0
- CVE-2023-4163Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS
- CVE-2023-3489firmwaredownload command could log servers passwords in clear text
- CVE-2023-31926Arbitrary File Overwrite using less command
- CVE-2023-31927An information disclosure in the web interface of Brocade Fabric OS
- CVE-2023-31432Privilege issues in multiple commands
- CVE-2023-31928XSS vulnerability in Brocade Webtools
- CVE-2023-31428CLI allows upload or transfer files of dangerous types
- CVE-2023-31430buffer overflow vulnerability in “secpolicydelete” command
- CVE-2023-31431A buffer overflow vulnerability in “diagstatus” command
- CVE-2023-31427Knowledge of full path name
- CVE-2023-31426scp, sftp, ftp servers passwords in supportsave
- CVE-2023-31425Privilege escalation via the fosexec command
- CVE-2023-31429Multiple commands print sensitive information in the terminal
- CVE-2022-33187Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs
- CVE-2021-27798privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x
- CVE-2019-16204Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication ke