CVE-2024-5462
High
Description
If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsave capture if encryption of passwords is not enabled. An attacker can use these passwords to fetch values of the supported OIDs via SNMPv3 queries. There are also a limited number of MIB objects that can be modified.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Broadcom Fabric Operating System
PublishedFeb 15, 2025
First seenFeb 15, 2025
Weakness typeCWE-319CWE-319
How to fix
Update
- broadcom fabric_operating_system9.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom fabric_operating_system | v < 9.2.0 | 9.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.