Threat Investigation
Request a demo

CVE-2023-4162

Medium

Description

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

SeverityMedium
CVSS4.4
Exploit probability—
ProductBroadcom Fabric Operating System
PublishedAug 31, 2023
First seenAug 31, 2023
Weakness typeCWE-252CWE-252

How to fix

Update
  • broadcom fabric_operating_system9.2.0a or later

Affected products

ProductAffected versionsFixed in
broadcom fabric_operating_system9.0.1a ≤ v < 9.2.0a9.2.0a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.