CVE-2025-7398 Medium Strength Cipher Suites detected on port on ports 9000 and 8036
Brocade ASCG devices allow medium strength cipher suites on internal ports, potentially weakening encryption security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7398?
CVE-2025-7398 is a high-severity vulnerability in Broadcom Brocade ASCG, published on 17 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and 8036.
Weakness: CWE-326
Which versions are affected by CVE-2025-7398?
It affects 1 product.
Products include Broadcom Brocade Active Support Connectivity Gateway.
How do I fix CVE-2025-7398?
No fix has been published for CVE-2025-7398 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-7398 being exploited?
There is no known exploitation of CVE-2025-7398 in the wild and no public exploit code.
Other vulnerabilities in Broadcom Brocade ASCG
- CVE-2026-85421 Missing authorization in Brocade Active Support Connectivity Gateway
- CVE-2026-85489 Missing authorization in Brocade Active Support Connectivity Gateway
- CVE-2026-85423 A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0.
- CVE-2026-85486 Code injection in Brocade Active Support Connectivity Gateway
- CVE-2026-85487 Path traversal in Brocade Active Support Connectivity Gateway
Sources
Also known as GHSA-pwm2-hq35-h422.