CVE-2024-29969: TLS/SSL weak message authentication code ciphers are added by default for port 18082

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-19 · updated 2026-06-17
Weakness: CWE-326

Description

When a Brocade SANnav installation is upgraded from Brocade SANnav v2.2.2 to Brocade SANnav 2.3.0, TLS/SSL weak message authentication code ciphers are added by default for port 18082.

Affected products

Brocade SANnav: from 2.2.2 before 2.3.0a — fixed in 2.3.0a

How to fix

Upgrade to a fixed version: Brocade SANnav 2.3.0a. Check the vendor advisory for mitigations.

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23251
https://support.broadcom.com/external/content/SecurityAdvisories/0/23251

Get alerted when CVE-2024-29969 or the next vulnerability affects your stack