Skip to content
OpenAdvisories
Medium WID-SEC-2024-3405 3 CVEs

Broadcom Fabric OS: Mehrere Schwachstellen

Published Nov 11, 2024 · Updated Jan 7, 2025 · Revision 2 · de-DE

Vendor: Broadcom Vendor: HPE Product: Fabric OS Product: Switch

Summary

Ein Angreifer kann mehrere Schwachstellen in Broadcom Fabric OS ausnutzen, um Informationen offenzulegen, seine Privilegien zu erhöhen oder um Sicherheitsmaßnahmen zu umgehen.

Product

Fabric OS (FOS) ist ein Betriebssystem für FibreChannel Switches.

Vulnerabilities 3

  • High 8.5
    CVE-2024-7517

    Privileged escalation via crafted use of portcfg command

    A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploi…

    Brocade Fabric OS
  • High 7.0
    CVE-2024-7516

    Brocade Fabric OS before 9.2.2 does not enforce strict host key checking

    A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the Brocade Fabric OS Switch is performing vari…

    Brocade Fabric OS
  • Medium 5.9
    CVE-2024-10403

    SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav

    Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in a weblinker core dump that is later capt…

    Brocade Fabric OS

Revision history

  1. #2

    Neue Updates von HP aufgenommen

  2. #1

    Initiale Fassung

References