CVE-2022-33186: Broadcom Fabric Operating System

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.

Affected products

• Broadcom Fabric Operating System: version 7.4.2j only; version 8.2.3c only; version 9.0.1e only
• Brocade Fabric Operating System: version 9.1.1 only

Published 2022-12-08. Last modified 2026-06-17.