Lucene search
Broadcom Security ResponseBSNSA21237HistorySep 13, 2022 - 12:00 a.m.
CVE-2022-33178. A vulnerability in the radius authentication system could allow arbitrary code execution.
2022-09-1300:00:00
Broadcom Security Response
support.broadcom.com
7
vulnerability
authentication
brocade fabric os
Security Advisory ID : BSA-2022-2077
Component : FOS
Revision : 1.0
**
A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS 9.0 could allow a remote attacker to execute arbitrary code on the Brocade switch.
Due to improper input validation, the privileged attacker could provide a script as Brocade-Auth-Role parameter that could be executed.
Note: The issue was found during penetration testing against an older version of Brocade Fabric OS. Updated linux and architecture introduced with Brocade Fabric OS 9.0.0 prevents this attack and is not vulnerable.
Affected Product
All Brocade Fabric OS versions before 9.0.0
Related
prion
prion
Authentication flaw
2022-10-25 21:15:00
cve
cve
CVE-2022-33178
2022-10-25 21:15:46
nvd
nvd
CVE-2022-33178
2022-10-25 21:15:46
cvelist
cvelist
CVE-2022-33178
2022-10-25 00:00:00
broadcom
broadcom