CVE-2023-4162 - Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

Back Back to CVE browser

MEDIUM

Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

Published Aug 31, 2023

4.4

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

Affected products

Vendor Brocade Product Fabric OS Default
unaffected
- Version
  Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Brocade

Fabric OS

unaffected

Version	Status	Constraints
Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-252

CWE-400

Uncontrolled Resource Consumption

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54041
Advisory
https://security.netapp.com/advisory/ntap-20231124-0010/
Third Party Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22513
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54041		Advisory
https://security.netapp.com/advisory/ntap-20231124-0010/		Third Party Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22513		Vendor Advisory