CVE-2023-3454

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-3454
Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://security.netapp.com/advisory/ntap-20240628-0004/ Third Party Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 Vendor Advisory
https://security.netapp.com/advisory/ntap-20240628-0004/ Third Party Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
History

13 Feb 2025, 17:16

Type Values Removed Values Added
Summary (en) Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch. (en) Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.

04 Feb 2025, 15:29

Type Values Removed Values Added
First Time Broadcom
Broadcom fabric Operating System
CPE cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
References () https://security.netapp.com/advisory/ntap-20240628-0004/ - () https://security.netapp.com/advisory/ntap-20240628-0004/ - Third Party Advisory
References () https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 - () https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 - Vendor Advisory

21 Nov 2024, 08:17

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20240628-0004/ - () https://security.netapp.com/advisory/ntap-20240628-0004/ -
References () https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 - () https://support.broadcom.com/external/content/SecurityAdvisories/0/23215 -

28 Jun 2024, 16:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20240628-0004/ -

04 Apr 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-04 17:15

Updated : 2025-02-13 17:16

NVD link : CVE-2023-3454

Mitre link : CVE-2023-3454

CVE.ORG link : CVE-2023-3454

JSON object : View

Products Affected

broadcom

  • fabric_operating_system
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')