Paper/Archive/CVE-2023-3454

CVE-2023-3454

Brocade Fabric OS — Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 68.3.683 × 2013.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.

Affected

ProductAffectedFixed inSource

Fabric OSafter v9.0 and before v9.2.0–CNA

brocade_fabric_operating_system9.0 – < 9.2.09.2.0CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

brocade (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.broadcom.com/external/content/SecurityAdvisories/0/23215 refsecurity.netapp.com/advisory/ntap-20240628-0004