CVE-2024-4159— Protection mechanisms
Quick assessment
Affected
Brocade Brocade SANnav
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Broadcom Brocade SANnav是美国博通（Broadcom）公司的一套SAN管理平台。 Brocade SANnav v2.3.0a之前版本存在安全漏洞，该漏洞源于缺乏保护机制，可能允许未经身份验证的攻击者嗅探信息。
Possible ATT&CK Techniques 1 AI
T1040 · Network Sniffing
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-4159
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Protection mechanisms
Source: CVE Program / CVE List V5
Vulnerability Description
Brocade SANnav before v2.3.0a lacks protection mechanisms on port 2377/TCP and 7946/TCP, which could allow an unauthenticated attacker to sniff the SANnav Docker information.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Brocade SANnav 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Broadcom Brocade SANnav是美国博通（Broadcom）公司的一套SAN管理平台。 Brocade SANnav v2.3.0a之前版本存在安全漏洞，该漏洞源于缺乏保护机制，可能允许未经身份验证的攻击者嗅探信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Brocade | Brocade SANnav | before v2.3.0a | - |
|
II. Public POCs for CVE-2024-4159
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-4159
请登录查看更多情报信息。
Other References for CVE-2024-4159 (1)
Same Patch Batch · Brocade · 2024-04-25 · 3 CVEs total
| CVE-2024-4161 | 8.6 HIGH | Syslog traffic sent in clear-text |
| CVE-2024-4173 | 7.6 HIGH | SANnav versions exposes Kafka in the wan interface. |
IV. Related Vulnerabilities
Same product: Brocade SANnav
-
CVE-2025-6392
Daily Data Dump Collector logs database password in cleartex -
CVE-2025-6390
Cleartext storage of sensitive information in Brocade SANnav -
CVE-2025-4662
Plaintext security passwords are logged in the audit logs wh -
CVE-2024-4282
Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 -
CVE-2024-10405
Weak TLS Ciphers on Brocade SANnav port 443 & 18082
Same vendor: Brocade
-
CVE-2026-0869
Application User custom defined accounts are not properly pa -
CVE-2025-58381
Directory transversal vulnerability in Brocade Fabric OS bef -
CVE-2025-9711
Privilege escalation in Brocade Fabric OS before 9.2.1c3, an -
CVE-2025-58380
Directory transversal vulnerability in Brocade Fabric OS bef -
CVE-2026-0383
Information disclosure in Brocade Fabric OS before 9.2.1c2,
Same weakness: CWE-200
-
CVE-2026-54553
Starlette-Admin: Unvalidated `order_by` parameter allows ord -
CVE-2026-80194
Kimai before 2.64.0 Missing Authorization via ProjectViewCon -
CVE-2026-62865
TypeBot: Arbitrary server file read via Send Email block att -
CVE-2026-78981
Chrome Mobile iOS <=152.0.7977.65信息泄露漏洞 -
CVE-2026-78957
iOS版Chrome<152.0.7977.65信息泄露漏洞
V. Comments for CVE-2024-4159
No comments yet