PT-2022-21728 · Brocade · Brocade Fabric Os

Pierre Barre · Published 2022-12-08 · Updated 2026-02-05 · CVE-2022-33186

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS software versions prior to v9.1.1

Description A vulnerability in Brocade Fabric OS software could allow a remote unauthenticated attacker to execute commands on a Brocade Fabric OS switch, capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.

Recommendations For Brocade Fabric OS software versions prior to v9.1.1, update to a version later than v9.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the switch to minimize the risk of exploitation.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-33186

Affected Products

Brocade Fabric Os

References · 6

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2121 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-33186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33186 · Security Note
• https://t.me/cibsecurity/54200 · Telegram Post
• https://t.me/cvenotify/39486 · Telegram Post
• https://t.me/cveNotify/150985 · Telegram Post