CVE-2024-4282 Details
Description
Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.
A vulnerability exists in Brocade SANnav OVA versions prior to 2.3.1b, where the SSH protocol on port 22 uses deprecated SHA1 cryptographic settings. This vulnerability exposes the application to collision attacks, allowing an attacker to create different input data that produces the same hash value, undermining the integrity of the cryptographic communication.
Users can upgrade to Brocade SANnav versions 2.4.0 or 2.3.1b to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 18, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.broadcom.com/external/content/SecurityAdvisories/0/25400 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-327 | Use of a Broken or Risky Cryptographic Algorithm | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| broadcom brocade sannav | < 2.3.1b |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 26, 2025 | Initial Analysis | [email protected] |
| Feb 15, 2025 | New CVE Received | [email protected] |