CVE-2024-5461 - CVE House
Back to Database
Status published High CVE-2024-5461

Command or parameter injection via unique embedded switch SNMP commands.

Vulnerability Description

Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. This injection could allow the authenticated attacker to issue commands as Root.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-5461

Credits & Attribution

No credits recorded in the NVD database.

References

More from Brocade

View All →
CVE-2025-9711
Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
High 8.5
CVE-2025-58383
Privilege escalation via bind command in Brocade Fabric OS
High 8.4
CVE-2025-58382
Privilege escalation in Brocade Fabric before 9.2.1c2 and 9.2.2 through 9.2.2a
High 8.5
CVE-2025-58381
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands
Medium 4.6
CVE-2025-58380
Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command
Medium 4.6

Affected Vendor

Affected Software

Brocade Fabric OS
Vulnerable Versions:
before 8.2.3e1_pha

Timeline

Official Publish: February 15th, 2025
Last Modified: September 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-78

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1005 Data from Local System
Collection
T1041 Exfiltration Over C2 Channel
Exfiltration