CVE-2023-31430

buffer overflow vulnerability in “secpolicydelete” command

CVSS 5.5 MEDIUMEPSS 0.3%CWE-120

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

01 Aug 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Brocade · Brocade Fabric OS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://security.netapp.com/advisory/ntap-20230908-0007/https://support.broadcom.com/external/content/SecurityAdvisories/0/22381