Brocade SANnav exposes Kafka in the wan interface (CVE-2024-4173)

2024-04-2500:00:00

Broadcom Security Response

support.broadcom.com

brocade sannav

vulnerability

kafka

wan interface

unauthenticated attacker

dos

software

0.0004 Low

EPSS

Percentile

9.0%

JSON

Brocade SANnav ports used by Kafka are open for the entire wan vs being limited to only the FabricOS switches discovered by the SANnav. Additionally, in Brocade SANnav versions priorto version v2.2.0, the Kafka process is started as a root user using defaultcredentials.

The vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.