What’s Vulnerable › Vulnerabilities
CVE-2024-10405: Weak TLS Ciphers on Brocade SANnav port 443 & 18082
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-15 · updated 2026-06-17
- Weakness: CWE-327
Description
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no customer data, no personal data and no secrets or passwords, as it travels across the network.
Affected products
- Brocade SANnav: before 2.3.1b — fixed in 2.3.1b
How to fix
Upgrade to a fixed version: Brocade SANnav 2.3.1b. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-10405 or the next vulnerability affects your stack