DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Broadcom Brocade Switch: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2023-08-01
Ein lokaler Angreifer kann mehrere Schwachstellen in Broadcom Brocade Switch ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren, ein Cross-Site-Scripting-Angriff durchzuführen oder Informationen offenzulegen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-31927US | medium5.3 | — | ||
An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get techn… | ||||
| CVE-2023-31926US | high7.1 | — | ||
System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0. | ||||
| CVE-2023-31928US | medium6.1 | — | ||
A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a re… | ||||
| CVE-2023-31432US | high7.8 | — | ||
Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Broca… | ||||
| CVE-2023-31431US | medium5.5 | — | ||
A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric… | ||||
| CVE-2023-31430US | medium5.5 | — | ||
A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash… | ||||
| CVE-2023-31428US | medium5.5 | — | ||
Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory usin… | ||||
| CVE-2023-31427US | high7.8 | — | ||
Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execu… | ||||
| CVE-2023-31429US | medium5.5 | — | ||
Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfil… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
- Broadcom Security Advisory vom 2023-08-01external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan