Lucene search

BrocadeCVE-2023-31429

HistoryAug 01, 2023 - 9:15 p.m.

CVE-2023-31429

2023-08-0121:15:10

CWE-77

CWE-209

brocade

web.nvd.nist.gov

brocade

fabric os

vulnerability

cve-2023-31429

security

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.0%

JSON

Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable commands that can cause the content of shell interpreted variables to be printed in the terminal.

Affected configurations

Nvd

Node

broadcomfabric_operating_systemRange<9.1.1c

VendorProductVersionCPE
broadcomfabric_operating_system*cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	fabric_operating_system	*	cpe:2.3:o:broadcom:fabric_operating_system::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fabric OS",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "before Brocade Fabric OS v9.1.1c, v9.2.0"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20230908-0007/

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22408

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-31429