CVE-2024-10405

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.1b

Description The issue allows an attacker to read the Brocade SANnav data stream, which includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, and IP Addresses, as it travels across the network. This is due to the enablement of weak TLS ciphers on ports 443 and 18082. No customer data, personal data, secrets, or passwords are exposed.

Recommendations For Brocade SANnav versions prior to 2.3.1b, update to version 2.3.1b or later to resolve the issue. As a temporary workaround, consider restricting access to ports 443 and 18082 to minimize the risk of exploitation.