CVE-2023-3489: Broadcom Fabric Operating System

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.

Affected products

• Broadcom Fabric Operating System: version 9.2.0 only

Published 2023-08-31. Last modified 2026-06-17.