Lucene search
Broadcom Security ResponseBSNSA23246HistoryApr 17, 2024 - 12:00 a.m.
Ping at regular intervals (CVE-2024-29961)
2024-04-1700:00:00
Broadcom Security Response
support.broadcom.com
6
ping commands
regular intervals
cve-2024-29961
brocade sannav
gridgain.com
supply-chain attack
software vulnerability
A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping commands in the background at regular intervals to gridgain.com and ignite.apache.org to check if updates are available for the Component. This could make an unauthenticated, remote attacker aware of the behavior and launch a supply-chain attack against a Brocade SANnav appliance.
Affected configurations
Node
broadcombrocade_sannavRange<2.3.1
ORbroadcombrocade_sannavRange<2.3.0a
| CPE | Name | Operator | Version |
|---|---|---|---|
| brocade sannav | lt | 2.3.1 | |
| brocade sannav | lt | 2.3.0a |
Related
nvd
nvd
CVE-2024-29961
2024-04-19 04:15:10
cve
cve
CVE-2024-29961
2024-04-19 04:15:10
cvelist
cvelist
CVE-2024-29961 supply-chain attack risk
2024-04-19 03:59:25
vulnrichment
vulnrichment
CVE-2024-29961 supply-chain attack risk
2024-04-19 03:59:25
thn
thn
Severe Flaws Disclosed in Brocade SANnav SAN Management Software
2024-04-26 14:03:00