CVE-2024-7516

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a switch admin.

Score

CVSS 3.1 7.1 High

Status

Analyzed - sirt@brocade.com

Published

2024-11-12

Last modified

2024-11-21

Weaknesses

CWE-306, CWE-322

Affected products

• Fabric Operating System (Broadcom)
• Fabric Os (Brocade)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25177