Vulnerability Intelligence Report
Syslog traffic sent in clear-text
CVE-2024-4161
In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticated, remote attacker to capture sensitive information.
No Active Exploit Signals
CVSS Base Score
8.6
HIGH
Exploitability:3.9
Impact Score:4.0
EPSS Probability:0.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-319 ↗CWE-319 Cleartext Transmission of Sensitive Information
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Brocade | Brocade SANnav | before v2.3.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.470%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Brocade Communications Systems LLC, a Broadcom Company · Vendor · USA |
| Reserved | 2024-04-25T02:14:23 |
| Published | 2024-04-25T02:32:08 |
| Last Updated | 2024-08-01T20:33:52 |
Community Chatter & Buzz