High severity · published Apr 19, 2024
CVE-2024-29960
Identical SSH keys utilized inside the OVA image (CVE-2024-29960)
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnnav VM based on the official OVA images is vulnerable to MITM over SSH. An attacker can decrypt and compromise the SSH traffic to the SANnav.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Brocade SANnav · Brocade
before v2.3.1 and v2.3.0a · source: vendor, NVD
SA
Sannav · Brocade
All versions, or not specified · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-29960
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-29960
Vendor Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23244
More from Brocade SANnav
9.8
CVE-2024-4282
Weak TLS Ciphers on Brocade SANnav OVA SSH port 22
9.8
CVE-2024-4173
SANnav versions exposes Kafka in the wan interface.
9.8
CVE-2024-29966
hard-coded credentials in the documentation that appear as the appliance root password
8.6
CVE-2024-29959
Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save
8.2
CVE-2024-29961
supply-chain attack risk