Stack-Based Buffer Overflow in Brocade Fabric OS by Broadcom
CVE-2022-33184

7.8HIGH

Key Information:

Vendor

Broadcom
Status
Brocade Fabric Os
Vendor
CVE Published:
25 October 2022

What is CVE-2022-33184?

A stack-based buffer overflow vulnerability in the fab_seg.c.h libraries of Broadcom's Brocade Fabric OS could allow local authenticated attackers to execute arbitrary code with root user privileges. This flaw affects all versions prior to v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, and v7.4.2j, exposing systems to significant risk if exploited.

Affected Version(s)

Brocade Fabric OS Brocade Fabric OS versions before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j

References

https://www.broadcom.com/support/fibre-channel-networking...
https://security.netapp.com/advisory/ntap-20230127-0009/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.