PT-2023-28003 · Brocade · Brocade Fabric Os

CVE-2023-4162

·

Publicado

2023-08-31

·

Atualizado

2024-09-18

CVSS v3.1

4.4

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 9.0 through 9.2.0a
Description A segmentation fault can occur in Brocade Fabric OS through the passwdcfg command. This could allow an authenticated privileged user to crash a Brocade Fabric OS switch using the cli "passwdcfg --set -expire -minDiff".
Recommendations For Brocade Fabric OS versions 9.0 through 9.2.0a, consider disabling the passwdcfg command until a patch is available to prevent potential crashes. Restrict access to the passwdcfg command to minimize the risk of exploitation. Avoid using the passwdcfg --set -expire -minDiff cli command until the issue is resolved.

Correção

Resource Exhaustion

Unchecked Return Value

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-4162

Produtos afetados

Brocade Fabric Os