PT-2022-5073 · Brocade · Brocade Fabric Os

Published 2022-09-13 · Updated 2025-05-09 · CVE-2022-33185

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS version 9.1.0

Description The issue is related to the use of unsafe string functions to process user input in several commands, which can lead to stack-based buffer overflows. This allows authenticated local attackers to execute arbitrary code as the root user account. The vulnerability is also associated with reading data beyond buffer boundaries in memory, enabling an attacker to execute arbitrary code.

Recommendations For Brocade Fabric OS versions prior to 9.0.1e, update to version 9.0.1e or later to resolve the issue. For Brocade Fabric OS version 9.1.0, consider disabling the use of unsafe string functions in commands until a patch is available. As a temporary workaround, restrict access to commands that use unsafe string functions to minimize the risk of exploitation.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2022-06296

CVE-2022-33185

Affected Products

Brocade Fabric Os

References · 8

• https://osv.dev/vulnerability/CVE-2022-33185 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06296 · Security Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2078 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33185 · Security Note
• https://t.me/cibsecurity/52075 · Telegram Post
• https://security.netapp.com/advisory/ntap-20230127-0010 · Note
• https://t.me/cvenotify/121604 · Telegram Post
• https://support.lenovo.com/us/en/product_security/ps500001-lenovo-product-security-advisories · Note