Command Injection Vulnerability in Brocade 6547 Embedded Switch Blade

CVE-2024-5461

What is CVE-2024-5461?

A command injection vulnerability exists within the Simple Network Management Protocol (SNMP) implementation on the Brocade 6547 (FC5022) embedded switch blade. This issue arises from the internal script execution that occurs when SNMP operations are performed. An attacker with authentication can exploit this vulnerability to inject arbitrary commands into the SNMP binary, enabling them to execute unauthorized commands with root privileges. Organizations using the Brocade 6547 (FC5022) should review their SNMP configurations and apply necessary security measures to mitigate potential exploitation.

References