CVE-2023-4162

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - sirt@brocade.com

Published

2023-08-31

Last modified

2024-09-30

Weaknesses

CWE-252, CWE-400

Affected products

• Fabric Operating System (Broadcom)
• Fabric Os (Brocade)

References

• https://security.netapp.com/advisory/ntap-20231124-0010/
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22513