CVE-2022-33185 — Out-of-bounds Write in Fabric Operating System

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 81.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Broadcom Fabric Operating SystemBrocade Fabric OS
Timeline
PublishedOct 25
Latest updateOct 26

Description

Several commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe string functions to process user input. Authenticated local attackers could abuse these vulnerabilities to exploit stack-based buffer overflows, allowing arbitrary code execution as the root user account.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5brocade/brocade_fabric_osBrocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0

🔴Vulnerability Details

2
GHSA
GHSA-m2cq-w2fq-677j: Several commands in Brocade Fabric OS before Brocade Fabric OS v↗2022-10-26
▶
CVEList
CVE-2022-33185: Several commands in Brocade Fabric OS before Brocade Fabric OS v↗2022-10-25
▶
CVE-2022-33185 — Out-of-bounds Write | cvebase