{"id":"CVE-2024-4173","aliases":["EUVD-2024-32732","GHSA-pm6f-4pg9-fmg4"],"status":"published","title":"SANnav versions exposes Kafka in the wan interface.","description":"A vulnerability in Brocade SANnav exposes Kafka in the wan interface.\n\nThe vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00588,"percentile":0.48393,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2024-04-25T07:30:44Z","modified":"2026-06-17T08:01:16Z","products":[{"vendor":"broadcom","product":"brocade_sannav"},{"vendor":"brocade","product":"brocade sannav"},{"vendor":"brocade","product":"sannav"}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/23285","tags":["x_transferred","Not Applicable"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4173"},{"url":"https://github.com/advisories/GHSA-pm6f-4pg9-fmg4"}],"sources":{"cve":[{"id":"CVE-2024-4173","title":"SANnav versions exposes Kafka in the wan interface.","description":"\nA vulnerability in Brocade SANnav exposes Kafka in the wan interface.\n\nThe vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.\n\n","status":"published","published":"2024-04-25T07:30:44.685Z","modified":"2024-08-01T20:33:52.534Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:17.150655Z"}],"euvd":[{"id":"EUVD-2024-32732","description":"\nA vulnerability in Brocade SANnav exposes Kafka in the wan interface.\n\nThe vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.\n\n","status":"published","published":"2024-04-25T07:30:44Z","modified":"2024-08-01T20:33:52Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:37.375536Z"}],"ghsa":[{"id":"GHSA-pm6f-4pg9-fmg4","title":"A vulnerability in Brocade SANnav ova versions before Brocade SANnav v2.3.1 and v2.3.0a exposes...","description":"A vulnerability in Brocade SANnav ova versions before Brocade SANnav v2.3.1 and v2.3.0a exposes Kafka in the wan interface.\n\nThe vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS, the Brocade SANnav appliance.","status":"published","published":"2024-04-25T09:32:09Z","modified":"2025-02-06T18:32:08Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"critical"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:59:49.339987Z"}],"nvd":[{"id":"CVE-2024-4173","description":"\nA vulnerability in Brocade SANnav exposes Kafka in the wan interface.\n\nThe vulnerability could allow an unauthenticated attacker to perform various attacks, including DOS against the Brocade SANnav.\n\n","status":"published","published":"2024-04-25T08:15:07.977Z","modified":"2026-06-17T08:01:16.28Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:09:53.50104Z"}]}}