Lucene search

K
cveBrocadeCVE-2023-31431
HistoryAug 02, 2023 - 12:15 a.m.

CVE-2023-31431

2023-08-0200:15:17
CWE-120
brocade
web.nvd.nist.gov
33
cve-2023-31431
buffer overflow
brocade fabric os
denial of service
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service.

Affected configurations

Nvd
Node
broadcombrocade_fabric_operating_systemRange<9.1.1c
OR
broadcombrocade_fabric_operating_systemMatch9.2.0
VendorProductVersionCPE
broadcombrocade_fabric_operating_system*cpe:2.3:o:broadcom:brocade_fabric_operating_system:*:*:*:*:*:*:*:*
broadcombrocade_fabric_operating_system9.2.0cpe:2.3:o:broadcom:brocade_fabric_operating_system:9.2.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fabric OS",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "before Brocade Fabric OS v9.1.1c, v9.2.0"
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2023-31431