An API endpoint in the data collection service of Brocade Active Support Connectivity Gateway lacks authentication or authorization checks on incoming requests. This flaw allows a remote attacker to instruct the appliance to open SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the device into an unauthenticated proxy or remote execution vector.

Brocade Active Support Connectivity Gateway versions prior to 3.5.0 are affected. The vulnerability resides in the data collection component that services the exposed API endpoint.

The CVSS score of 8.6 indicates high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is network access to the vulnerable endpoint; no local privilege or user interaction is required. An attacker can remotely trigger SSH connections from the appliance to any host and execute arbitrary commands, potentially compromising the appliance and connected hosts.