Broadcom

Fabric Operating System

81 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-3454

  • EPSS 4.9%
  • Published 04.04.2024 17:15:09
  • Last modified 13.02.2025 17:16:56

Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.

8.1

CVE-2021-27795

  • EPSS 0.04%
  • Published 06.12.2023 02:15:06
  • Last modified 21.11.2024 05:58:34

Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This ...

4.4

CVE-2023-4163

  • EPSS 0.03%
  • Published 31.08.2023 01:15:09
  • Last modified 13.02.2025 17:17:15

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.

7.5

CVE-2023-3489

  • EPSS 0.11%
  • Published 31.08.2023 00:15:07
  • Last modified 13.02.2025 17:16:56

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.

7.8

CVE-2023-31427

  • EPSS 0.06%
  • Published 01.08.2023 23:15:28
  • Last modified 13.02.2025 17:16:28

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. Starting with Fabric ...

6.5

CVE-2023-31426

  • EPSS 0.16%
  • Published 01.08.2023 22:15:13
  • Last modified 21.11.2024 08:01:50

The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive inform...

5.5

CVE-2023-31429

  • EPSS 0.11%
  • Published 01.08.2023 21:15:10
  • Last modified 21.11.2024 08:01:50

Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowc...

7.8

CVE-2023-31425

  • EPSS 0.11%
  • Published 01.08.2023 21:15:10
  • Last modified 13.02.2025 17:16:27

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with ...

7.8

CVE-2022-33184

  • EPSS 0.05%
  • Published 25.10.2022 21:15:46
  • Last modified 07.05.2025 14:15:31

A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer overflows and execute arbitrary ...

7.2

CVE-2022-33178

  • EPSS 0.81%
  • Published 25.10.2022 21:15:46
  • Last modified 07.05.2025 21:15:54

A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.