Fabric Operating System vulnerabilities

46 known vulnerabilities in Fabric Operating System from Broadcom. 45 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Brocade Fabric OS: Incorrect Default Permissions

  CVE-2022-33182Oct 25, 2022Brocade Fabric OS

  A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfg

• 7.2 High severity

  A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric…

  CVE-2022-33178Oct 25, 2022Brocade Fabric OSEPSS 1.71%

  A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.

• 8.8 High severity

  Brocade Fabric OS: Improper Privilege Management

  CVE-2022-28169Oct 25, 2022Brocade Fabric OS

  Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploi

• 7.5 High severity

  https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-27775Jun 2, 2022Https://github.com/curl/curlEPSS 3.34%

  An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

• 8.1 High severity

  https://github.com/curl/curl: Missing Authentication for Critical Functionality

  CVE-2022-22576May 26, 2022Https://github.com/curl/curlEPSS 2.52%

  An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfe

• 7.8 High severity

  Linux Kernel Heap Out-of-Bounds Write Exploited

  CVE-2021-22555Jul 7, 2021Linux kernelEPSS 78.7%

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space