CVE-2023-31925

published 2023-08-31

CVE-2023-31925: Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge…

Priority P3 36 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

Brocade
SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords
in plaintext. A privileged user could retrieve these credentials with
knowledge and access to these log files. SNMP
credentials could be seen in SANnav SupportSave if the capture is
performed after an SNMP configuration failure causes an SNMP
communication log dump.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
broadcom	brocade_sannav	< 2.2.2a	2.2.2a
brocade	brocade_sannav	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-312