CVE-2024-5460

published 2024-06-26

CVE-2024-5460: A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow…

Priority P3 53 high 8.1 CVSS 3.1

AV N AC L PR L UI N S U C H I H A N

A vulnerability in the default configuration of the Simple Network
Management Protocol (SNMP) feature of Brocade Fabric OS versions before
v9.0.0 could allow an authenticated, remote attacker to read data from
an affected device via SNMP. The vulnerability is due to hard-coded,
default community string in the configuration file for the SNMP daemon.
An attacker could exploit this vulnerability by using the static
community string in SNMP version 1 queries to an affected device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
broadcom	fabric_operating_system	< 9.0.0	9.0.0
brocade	fabric_os	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798