CVE-2023-3454

HIGH

8.6

Description

Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.

CVE Details

CVSS v3.1 Score8.6

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published4/4/2024

Last Modified2/13/2025

Sourcenvd

Honeypot Sightings0

Affected Products

broadcom:fabric_operating_system

Weaknesses (CWE)

CWE-78CWE-78

References

https://security.netapp.com/advisory/ntap-20240628-0004/(sirt@brocade.com)

https://support.broadcom.com/external/content/SecurityAdvisories/0/23215(sirt@brocade.com)

https://security.netapp.com/advisory/ntap-20240628-0004/(af854a3a-2127-422b-91ae-364da2661108)

https://support.broadcom.com/external/content/SecurityAdvisories/0/23215(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.