BF
Product
Brocade Fabric Operating System
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 7Low 0
Watch
Add Brocade Fabric Operating System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3454 | 9.8 | Apr 4 | Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to… Affected: 9.0 before 9.2.0 |
| CVE-2023-31432 | 7.8 | Aug 2 | Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in… Affected: before 9.1.1c |
| CVE-2020-12243 | 7.5 | Apr 28 | In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash) Affected: All versions, or not specified |
| CVE-2023-31926 | 7.1 | Aug 2 | System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 Affected: before 9.1.1c |
| CVE-2021-23133 | 7.0 | Apr 22 | A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged… Affected: All versions, or not specified |
| CVE-2023-31928 | 6.1 | Aug 2 | A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a… Affected: before 9.2.0 |
| CVE-2020-1927 | 6.1 | Apr 2 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to… Affected: All versions, or not specified |
| CVE-2023-31431 | 5.5 | Aug 2 | A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric… Affected: before 9.1.1c; 9.2.0 |
| CVE-2023-31430 | 5.5 | Aug 2 | A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash… Affected: before 9.1.1c; 9.2.0 |
| CVE-2023-31428 | 5.5 | Aug 2 | Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory… Affected: before 9.1.1c; 9.2.0 |
| CVE-2020-35507 | 5.5 | Jan 4 | There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be… Affected: All versions, or not specified |
| CVE-2023-31927 | 5.3 | Aug 2 | An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get… Affected: before 9.1.1c |
Showing 12