CVE Feed

    Dashboard / CVE / CVE-2023-31432

    CVE-2023-31432

    Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid, a non-privileged user could obtain root privileges in Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c and v9.2.0.

    Published:Aug 1, 2023
    Last Modified:Feb 13, 2025
    EPS:Aug 1, 2023
    EPSS Score:0.00057
    CVSS Score:7.8

    Affected Products

    Vendor
    Broadcom
    Product
    Brocade Fabric Operating System

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2023-31926 (CVSS 7.1) — System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c…
    CVE-2023-31927 (CVSS 5.3) — An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 a…
    CVE-2023-31928 (CVSS 6.3) — A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade F…
    CVE-2023-31428 (CVSS 5.5) — Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that c…
    CVE-2023-31430 (CVSS 5.5) — A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.…
    CVE-2023-31431 (CVSS 5.5) — A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and …
    CVE-2021-23133 (CVSS 6.7) — A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
    CVE-2020-12243 (CVSS 7.5) — In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result…
    CVE-2020-1927 (CVSS 6.1) — In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-ref…
    CVE-2020-35507 (CVSS 5.5) — There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High