CVE-2024-10405 - CVE House
Back to Database
Status published Medium CVE-2024-10405

Weak TLS Ciphers on Brocade SANnav port 443 & 18082

Vulnerability Description

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no customer data, no personal data and no secrets or passwords, as it travels across the network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10405

Credits & Attribution

No credits recorded in the NVD database.

References

More from Brocade

View All →
CVE-2025-9711
Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
High 8.5
CVE-2025-58383
Privilege escalation via bind command in Brocade Fabric OS
High 8.4
CVE-2025-58382
Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a
High 8.5
CVE-2025-58381
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands
Medium 4.6
CVE-2025-58380
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command
Medium 4.6

Affected Vendor

Affected Software

Brocade SANnav
Vulnerable Versions:
Brocade SANnav before 2.3.1b

Timeline

Official Publish: February 14th, 2025
Last Modified: February 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-327

MITRE ATT&CK TTPs

T1040 Network Sniffing
Credential Access
T1552 Unsecured Credentials
Credential Access
T1557 Adversary-in-the-Middle
Collection
T1078 Valid Accounts
Persistence
T1041 Exfiltration Over C2 Channel
Exfiltration