CVE-2024-7516

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing various remote operations initiated by a switch admin.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-322 CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-75177.8A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local CVE-2024-75186.5Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This v CVE-2024-75199.6Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to pe CVE-2024-75208.8A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Fire CVE-2024-75218.8Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14,CVE-2024-75228.8Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Fire CVE-2024-75238.1A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. CVE-2024-75246.1Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Cont CVE-2024-75258.1It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response CVE-2024-75266.5ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from m CVE-2024-75278.8Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR <CVE-2024-75288.8Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox