Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-5461

Command or parameter injection via unique embedded switch SNMP commands.

Description

Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only enabled on the Brocade 6547 (FC5022) embedded switch. This injection could allow the authenticated attacker to issue commands as Root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brocade Brocade Fabric OS

Default version status: unaffected

  • before 8.2.3e1_phaaffected

References