Lucene search

K
broadcomBroadcom Security ResponseBSNSA23214
HistoryApr 04, 2024 - 12:00 a.m.

Truncated port name (CVE-2023-5973)

2024-04-0400:00:00
Broadcom Security Response
support.broadcom.com
8
brocade
fabric os
web interface
port name
reserved characters
user interface
switch
security vulnerability

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display.

Note: The vulnerability doesn’t affect the Brocade Fabric OS switch operation.

Affected configurations

Vulners
Node
broadcombrocade_fabric_operating_systemRange<9.2.0
OR
broadcombrocade_fabric_operating_systemRange9.x>

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for BSNSA23214