PT-2019-11023 · Brocade · Brocade Network Advisor

Published 2019-01-22 · Updated 2019-06-19 · CVE-2018-6444

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.1.0

Description: A remote unauthenticated attacker could exploit this issue to execute arbitrary code or arbitrary OS commands.

Recommendations: For versions prior to 14.1.0, update to version 14.1.0 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-6444

Affected Products

Brocade Network Advisor

References · 5

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-744 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6444 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-25655 · Note
• https://security.netapp.com/advisory/ntap-20190411-0005 · Note