Lucene search

BrocadeCVELIST:CVE-2023-31425

HistoryAug 01, 2023 - 8:34 p.m.

CVE-2023-31425 Privilege escalation via the fosexec command

2023-08-0120:34:47

brocade

www.cve.org

cve-2023-31425

vulnerability

brocade fabric os

privilege escalation

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0, “root” account access is disabled.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Fabric OS ",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20230908-0007/

support.broadcom.com/external/content/SecurityAdvisories/0/22407

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVELIST:CVE-2023-31425