Broadcom Brocade Fabric Operating System vulnerabilities

11 CVEs affecting Broadcom Brocade Fabric Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31927, published 2023-08-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1927, published 2020-04-02. Medium severity, CVSS 6.1. EPSS: 56.7% chance of exploitation in the next 30 days. In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL…
CVE-2020-12243, published 2020-04-28. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
CVE-2020-35507, published 2021-01-04. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to…
CVE-2023-31927, published 2023-08-02. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about…
CVE-2023-31928, published 2023-08-02. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote…
CVE-2021-23133, published 2021-04-22. High severity, CVSS 7.0. EPSS: 0.5% chance of exploitation in the next 30 days. A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If…
CVE-2023-31431, published 2023-08-02. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading…
CVE-2023-31430, published 2023-08-02. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric…
CVE-2023-31428, published 2023-08-02. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory using grep.
CVE-2023-31432, published 2023-08-02. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS…

Latest

CVE-2023-31926, published 2023-08-02. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.