Skip to content
OpenAdvisories
High WID-SEC-2023-2234 3 CVEs

HPE Fabric OS: Mehrere Schwachstellen

Published Aug 30, 2023 · Updated May 1, 2024 · Revision 3 · de-DE

Vendor: Broadcom Vendor: HPE Product: Fabric OS Product: Fabric OS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in HPE Fabric OS ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Fabric OS (FOS) ist ein Betriebssystem für FibreChannel Switches.

Vulnerabilities 3

  • High 8.6
    CVE-2023-3489

    firmwaredownload command could log servers passwords in clear text

    The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.

    Brocade Fabric OS
  • Medium 4.4
    CVE-2023-4162

    Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

    A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli …

    Brocade Fabric OS
  • Medium 4.4
    CVE-2023-4163

    Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS

    In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.

    Brocade Brocade Fabric OS

Revision history

  1. #3

    Neue Updates aufgenommen

  2. #2

    Neue Updates von BROCADE aufgenommen

  3. #1

    Initiale Fassung

References