PublicCVE

CVE-2023-31431

MEDIUM5.5JSON exportCreate alert

Description

A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service.

CVSS breakdown

CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products

  • Brocade / Fabric OSbefore Brocade Fabric OS v9.1.1c, v9.2.0 – before Brocade Fabric OS v9.1.1c, v9.2.0