CVEvulnerability
CVE-2022-33185
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account.
Affected configurations
• broadcom fabric operating system (< 9.0.1e)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://security.netapp.com/advisory/ntap-20230127-0010/ Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230127-0010/ Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 Vendor Advisory