CyberSecBulletin

Brocade Fabric OS vulnerabilities

We track 7 vulnerabilities in Brocade Fabric OS products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2022.

7vulnerabilities
1critical
6high
0exploited
8.3average CVSS score

Latest Brocade Fabric OS vulnerabilities

  • 9.8 Critical severity

    Brocade Fabric OS: Improper Neutralization of Special Elements used in an OS Command

    CVE-2022-33186Brocade Fabric OSEPSS 1.72%

    A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling p

  • 7.8 High severity

    Brocade Fabric OS: Out-of-bounds Write

    CVE-2022-33185Brocade Fabric OS

    Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary c

  • 7.8 High severity

    Brocade Fabric OS: Out-of-bounds Write

    CVE-2022-33184Brocade Fabric OS

    A vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric OS v9.1.1, v9.0.1e, v8.2.3c, v8.2.0_cbn5, 7.4.2j could allow local authenticated attackers to exploit stack-based buffer overflows and execute arbitrary code as th

  • 8.8 High severity

    Brocade Fabric OS: Out-of-bounds Write

    CVE-2022-33183Brocade Fabric OSEPSS 1.75%

    A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, 7.4.2.j could allow a remote authenticated attacker to perform stack buffer overflow using in “firmwaredownload” and “diagshow” commands.

  • 7.8 High severity

    Brocade Fabric OS: Incorrect Default Permissions

    CVE-2022-33182Brocade Fabric OS

    A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfg

  • 7.2 High severity

    A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric…

    CVE-2022-33178Brocade Fabric OSEPSS 1.71%

    A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.

  • 8.8 High severity

    Brocade Fabric OS: Improper Privilege Management

    CVE-2022-28169Brocade Fabric OS

    Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploi