CVE-2024-5461
CVE-2024-5461 is a critical command injection vulnerability affecting Brocade 6547 (FC5022) embedded switch blades using SNMP. An authenticated attacker can exploit this flaw to execute arbitrary commands as Root. This is achieved through parameter injection into SNMP operations that interact with the system.sh
script. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a moderate risk, demanding attention and assessment. Although not immediately critical (SVRS above 80), successful exploitation leads to full system control, posing a significant threat. This vulnerability allows attackers to gain complete administrative access. Mitigation strategies should be implemented to prevent unauthorized command execution. It highlights the importance of secure SNMP configurations and proper input validation.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.