CVE-2024-29966

—1

CVSS 3.1

9.8 critical

EPSS

<1%p49

Published

Apr 19, 2024 (Apr 19, 2024)

Modified

Jun 17, 2026

Description

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance.

Vendors: broadcom
Products: brocade sannav
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Severe Flaws Disclosed in Brocade SANnav SAN Management Software

The Hacker NewsApr 26, 14:03 UTC · Apr 26, 2024Vulnerability CVE-2024-2859 CVE-2024-29960 CVE-2024-29961+2 CVEs

Multiple Brocade SANnav SAN Management SW flaws allow device compromise

Security AffairsApr 29, 06:49 UTC · Apr 29, 2024Vulnerability CVE-2024-4159 CVE-2024-4161 CVE-2024-29966+9 CVEs