Brocade Fabric OS UI Vulnerability
CVE-2023-5973

4.3MEDIUM

Key Information:

Vendor

Brocade
Status
Fabric Os
Vendor
CVE Published:
5 April 2024

What is CVE-2023-5973?

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display.

Affected Version(s)

Fabric OS Versions v9.x and before v9.2.0

References

https://support.broadcom.com/external/content/SecurityAdv...
https://security.netapp.com/advisory/ntap-20240628-0005/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.