CVE-2023-4162 MEDIUM

CVE-2023-4162: Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

Vendor Brocade
Product Fabric OS
Weakness CWE-252
Published August 31, 2023
Last update September 30, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

Key dates

02Disclosure timeline

August 31, 2023 CVE published
September 30, 2024 Record updated