CVE-2022-33185

Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account.
Configurations

Configuration 1 (hide)

cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*

History

28 Feb 2023, 18:01

Type Values Removed Values Added
References (CONFIRM) https://security.netapp.com/advisory/ntap-20230127-0010/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20230127-0010/ - Third Party Advisory
CPE cpe:2.3:o:broadcom:fabric_operating_system:9.1.0:*:*:*:*:*:*:*

27 Jan 2023, 20:15

Type Values Removed Values Added
References
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20230127-0010/ -

28 Oct 2022, 13:13

Type Values Removed Values Added
References (MISC) https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 - (MISC) https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 - Vendor Advisory
First Time Broadcom fabric Operating System
Broadcom
CPE cpe:2.3:o:broadcom:fabric_operating_system:9.1.0:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
CWE CWE-787
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

25 Oct 2022, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-10-25 21:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-33185

Mitre link : CVE-2022-33185

CVE.ORG link : CVE-2022-33185


JSON object : View

Products Affected

broadcom

  • fabric_operating_system
CWE
CWE-787

Out-of-bounds Write