CVE-2024-29966

9.8 criticalEPSS 0.7%

Critical (9.8) in broadcom brocade sannav. EPSS 0.7% chance of exploitation in the next 30 days.

Brocade SANnav OVA before v2.3.1 and v2.3.0a contain hard-coded credentials in the documentation that appear as the appliance's root password. The vulnerability could allow an unauthenticated attacker full access to the Brocade SANnav appliance.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-11-01)
CWE: CWE-798
Published: 2024-04-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

broadcom:brocade_sannav

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/23255
https://support.broadcom.com/external/content/SecurityAdvisories/0/23255

Check your stack JSON