Brocade Fabric OS Security Vulnerabilities

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS has a security vulnerability that originates from a buffer overflow vulnerability in the secpolicydelete command. An attacker could exploit the vulnerabili...

Brocade Fabric OS Log Information Disclosure Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS, which stems from the fact that configupload/download prints passwords for servers such as ftp, which can lead to...

PT-2023-23528 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.2.0 Description: A reflected cross-site scripting XSS issue exists in Brocade Webtools PortSetting.html that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target...

PT-2023-23320 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.2.0 Brocade Fabric OS versions prior to 9.1.1c Description: A buffer overflow issue in the diagstatus command could allow an authenticated user to crash the Brocade Fabric OS switch, leading to a denial o...

Brocade Fabric OS Cross-Site Scripting Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A cross-site scripting vulnerability exists in Brocade Fabric OS versions prior to 9.2.0, which stems from a reflected cross-site scripting XSS vulnerability in...

PT-2023-23313 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions 9.1.0 through 9.1.1 Description: A vulnerability in the fosexec command could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0,...

CVE-2023-31927 - An information disclosure in the web interface of Brocade Fabric OS

An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about the web interface...

CVE-2023-31928 - XSS vulnerability in Brocade Webtools

A reflected cross-site scripting XSS vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools...

CVE-2023-31926 - Arbitrary File Overwrite using less command

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0...

Brocade Fabric OS Command Injection Vulnerability

Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade. A command injection vulnerability exists in Brocade Fabric OS, which stems from a security flaw in multiple commands that causes command execution to print the contents of shell...

Brocade Fabric OS Code Issue Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A code issue vulnerability exists in Brocade Fabric OS that stems from a security issue on the command line that allows a local user to dump files in the user's home directo...

Brocade Fabric OS Security Vulnerabilities

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS has a security vulnerability that originates from a buffer overflow vulnerability in the diagstatus command. An attacker could exploit the vulnerability to...

PT-2023-23314 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS versions prior to 8.2.3d Brocade Fabric OS versions prior to 9.2.0 Description: The issue concerns the Brocade Fabric OS Commands "configupload" and "configdownload" which print scp...

Brocade Fabric OS Path Traversal Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS that originates from allowing an authenticated attacker to obtain the full internal path and execute arbitrary commands...

CVE-2023-31431 - A buffer overflow vulnerability in “diagstatus” command

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service...

openssl file names of certificates being hashed were possibly passed to a command executed through the shell

In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there...

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following. Products Confirmed Not Affected No Brocade Fibre Channel products are affected by this vulnerability Solution While Brocade Fabric OS is not vulnerable to this exploit, a security scan may repo...

PT-2023-23317 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c, 9.2.0 Description: The issue arises when using various commands such as chassisdistribute, reboot, rasman, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable, and...

PT-2023-23315 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS version 9.2.0 Description: The issue allows an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned...

PT-2023-23316 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS versions prior to 9.2.0 Description: The issue allows a local user to dump files under the user's home directory using the grep command. This is due to a vulnerability in the comman...