This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-29960 | BDVDB-2026-232240 Detail

BrocadeBrocade SANnav

Description#

In Brocade SANnav server before v2.3.1 and v2.3.0a, the SSH keys inside the OVA image are identical in the VM every time SANnav is installed. Any Brocade SAnnav VM based on the official OVA images is vulnerable to MITM over SSH. An attacker can decrypt and compromise the SSH traffic to the SANnav.

Impact#

CAPEC-70 Try Common or Default Usernames and Passwords

Weaknesses#

  • CWE-798 Use of Hard-coded Credentials

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.