Brocade Active Support Connectivity Gateway CVE-2025-7398

The vulnerability stems from CWE-326 (Inadequate Encryption Strength), where Brocade ASCG implements medium-strength cryptographic algorithms on internal communication channels. The affected product is Broadcom's Brocade Active Support Connectivity Gateway (CPE: cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway), a diagnostic and support tool for Brocade infrastructure. Ports 9000 and 8036 are internal service ports used for inter-component communication within the ASCG appliance. Medium-strength cryptography typically refers to deprecated or weakened algorithms (such as 3DES, RC4, or short-key RSA/DSA) that are vulnerable to modern computational attacks including brute-force, collision, or cryptanalytic techniques. The local attack vector indicates the vulnerability requires access to the system hosting ASCG, suggesting exposure through local processes, container escape, or lateral movement scenarios rather than direct network exploitation of these ports.