Description
Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brocade | Fabric OS | before Brocade Fabric OS v9.1.1c and v9.2.0 | — |
Advisories 2
- WID-SEC-2023-1937 Broadcom Brocade Switch: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 1, 2024
- WID-SEC-2023-1969 HPE Fabric OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Aug 6, 2023