Summary
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Broadcom Brocade Switch und Broadcom Fabric OS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und vertrauliche Informationen preiszugeben.
Product
Brocade Switche sind Fibrechannel Switche für Cloud-Speicherumgebungen.
Fabric OS (FOS) ist ein Betriebssystem für FibreChannel Switches.
Vulnerabilities 2
-
High 8.6
Command or parameter injection via unique embedded switch SNMP commands.
Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter in…
-
Medium 5.3
Brocade Fabric OS may capture SNMP Passwords in clear text
If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed in a configupload capture or a supportsa…
Revision history
-
#2
Neue Updates von HP aufgenommen
-
#1
Initiale Fassung
References
-
Brocade Security Advisory vom 2024-07-30
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24610
-
Brocade Security Advisory vom 2024-07-30
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24411
-
HPE Security Bulletin vom 2024-08-01
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04679en_us&docLocale=en_US