Lucene search
Broadcom Security ResponseBSA-2022-2077HistorySep 13, 2022 - 12:00 a.m.
CVE-2022-33178. A vulnerability in the radius authentication system could allow arbitrary code execution.
2022-09-1300:00:00
Broadcom Security Response
www.broadcom.com
26
cve-2022-33178
brocade fabric os
authentication system
arbitrary code execution
remote attacker
input validation
privileged attacker
penetration testing
linux
architecture
software vulnerability
EPSS
0.005
Percentile
75.6%
A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.
Due to improper input validation, the privileged attacker could provide a script as Brocade-Auth-Role parameter that could be executed.
Note: The issue was found during penetration testing against an older version of Brocade Fabric OS. Updated linux and architecture introduced with Brocade Fabric OS 9.0.0 prevents this attack and is not vulnerable.
Affected Product
All Brocade Fabric OS versions before 9.0.0
Related
prion
prion
Authentication flaw
2022-10-25 21:15:00
cve
cve
CVE-2022-33178
2022-10-25 21:15:46
nvd
nvd
CVE-2022-33178
2022-10-25 21:15:46
cvelist
cvelist
CVE-2022-33178
2022-10-25 00:00:00
broadcom
broadcom