Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0
CVE-2023-4162

4.4MEDIUM

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
31 August 2023

What is CVE-2023-4162?

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

Affected Version(s)

Fabric OS Directors Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a

References

https://support.broadcom.com/web/ecx/support-content-noti...
https://security.netapp.com/advisory/ntap-20231124-0010/

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.