A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.
CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XBroadcom Fabric Operating System
OSBroadcom< 9.2.1c39.2.2 – 9.2.2c (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2024-3596CRITICAL9.0PL ✓same product
Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5
CVE-2022-33186CRITICAL9.8PL ✓same product
Brocade Fabric OS — zdalne wykonanie poleceń bez uwierzytelnienia
CVE-2021-27797CRITICAL9.8PL ✓same product
Zakodowane na stałe dane uwierzytelniające w Brocade Fabric OS
CVE-2020-15373CRITICAL9.8PL ✓same product
Wielokrotne buffer overflow w REST API Brocade Fabric OS
CVE-2020-15371CRITICAL9.8PL ✓same product
Code injection i privilege escalation w Brocade Fabric OS