VULNERABILITY INTELLIGENCE

CVE-2024-7516

CVSS score7 HIGH
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-11-12
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a switch admin.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function
  • CWE-322: Key Exchange without Entity Authentication

Primary references