CyberRota Analysis
AI-GeneratedBrocade ASCG versions prior to 3.5.0 are vulnerable to an unauthenticated remote attack that allows modification of the TLS client trust store. This flaw enables an attacker to introduce unauthorized Certificate Authority certificates, potentially facilitating Man-in-the-Middle (MITM) attacks on outbound communications with managed switches and peer nodes. Organizations using affected versions should prioritize remediation to safeguard their network communications against these risks.
Original NVD Description
An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates, potentially enabling Man-in-the-Middle (MITM) attacks against outbound communications with managed switches and peer nodes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)