CVE-2023-4163
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.
Risk Assessment
Buffer overflow can lead to system crashes, affecting service availability within the organization. It also allows potential exploitation by malicious users.
Recommendation
It is recommended to update the system to version 9.2.0a or later to mitigate this vulnerability. Additionally, monitor access to the system by local privileged users.
Other vulnerabilities in Brocade Fabric OS
See all- CVE-2025-1976MediumActively exploited
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
- CVE-2023-4162Medium
A segmentation fault can occur in Brocade Fabric OS after version 9.0 and before version 9.2.0a through the passwdcfg command. This allows an authenticated privileged local user to crash a Brocade Fabric OS switch.
- CVE-2023-3489High
The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade to any earlier version of Fabric OS.
Original NVD description (English source)
In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.