CVE-2023-31430
Assigner: brocade
Published: 2023-08-01T23:31:00.376Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Brocade Fabric OS
vendor: Brocade
versions: status: affected
version:  before Brocade Fabric OS v9.1.1c and v9.2.0
descriptions: supportingMedia: base64: no
type: text/html
value: A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.<br>


value: A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.



impacts: capecId: CAPEC-25
descriptions: value: CAPEC-25 Forced Deadlock
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-120
description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
type: CWE
source: discovery: UNKNOWN
title: buffer overflow vulnerability in “secpolicydelete” command
x_generator: engine: Vulnogram 0.1.0-dev