CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2022-33186

CVSS 9.8v3.1pub. 2022-12-08upd. 2026-02-05

A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Broadcom Fabric Operating System

    OS
    Broadcom
    7.4.2j8.2.3c9.0.1e

  • Brocade Fabric Operating System

    OS
    Brocade
    9.1.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassCommand Injection
CWE
References

Related vulnerabilities

CVE-2024-3596CRITICAL9.0PL ✓same product

Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5

CVE-2021-27797CRITICAL9.8PL ✓same product

Zakodowane na stałe dane uwierzytelniające w Brocade Fabric OS

CVE-2020-15373CRITICAL9.8PL ✓same product

Wielokrotne buffer overflow w REST API Brocade Fabric OS

CVE-2020-15371CRITICAL9.8PL ✓same product

Code injection i privilege escalation w Brocade Fabric OS

CVE-2020-15374CRITICAL9.8PL ✓same product

Reflected Input w REST API Brocade Fabric OS — podatność krytyczna