Skip to content
OpenAdvisories
High · 7.8 CVE-2023-31425 EUVD-2023-35733GHSA-q587-8249-rxpr

Privilege escalation via the fosexec command

Published Aug 1, 2023 · Updated Feb 13, 2025 · Assigned by brocade

Description

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 could allow a local authenticated user to perform privilege escalation to root by breaking the rbash shell. Starting with Fabric OS v9.1.0, “root” account access is disabled.

Affected products

VendorProductAffectedFixed
Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS v9.1.1 —

Advisories 1

References