Local File Export Vulnerability in Brocade Fabric OS by Broadcom
CVE-2022-33180

5.5MEDIUM

Key Information:

Vendor
Broadcom
Status
Brocade Fabric Os
Vendor
CVE Published:
25 October 2022

Summary

A security vulnerability exists in Brocade Fabric OS CLI versions prior to v9.1.0 that may allow a local authenticated user to export sensitive configuration files, including those pertaining to cryptographic settings. This could pose significant risks to the integrity and confidentiality of the network configurations, making it essential for organizations to apply the latest updates to mitigate potential threats.

Affected Version(s)

Brocade Fabric OS Brocade Fabric OS versions before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5

References

https://www.broadcom.com/support/fibre-channel-networking...
https://security.netapp.com/advisory/ntap-20230127-0005/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.