Web Interface Vulnerability in Brocade ASCG Affects Secure Communication
CVE-2024-1509

7.6HIGH

Key Information:

Vendor

Brocade
Status
Ascg
Vendor
CVE Published:
28 February 2025

What is CVE-2024-1509?

The Brocade ASCG Web Interface prior to version 3.2.0 lacks adequate enforcement of HTTP Strict Transport Security (HSTS), which is crucial for ensuring secure communications between clients and servers. This oversight enables potential downgrade attacks and SSL-stripping man-in-the-middle attacks, compromising the integrity of sensitive information. Furthermore, it diminishes protections against cookie-hijacking attempts, leaving users and organizations vulnerable to various security threats.

Affected Version(s)

ASCG before 3.2.0

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V4

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-1509 : Web Interface Vulnerability in Brocade ASCG Affects Secure Communication