CVE-2023-31426mediumCWE-532

CVE-2023-31426: medium-severity vulnerability in Brocade Fabric OS

scp, sftp, ftp servers passwords in supportsave

Published · Updated

Follow this CVE+ Monitor Fabric OS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.7%
The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
Affected products
Brocade · Brocade Fabric OS
Related CVEs — Brocade Fabric OS

In the same product, most dangerous first.

CVE-2019-16204—CVE-2019-16204EPSS 1.5%CVE-2019-16203—CVE-2019-16203EPSS 1.4%CVE-2024-5461HIGHCommand or parameter injection via unique embedded switch SNMP commands.EPSS 0.4%CVE-2023-31430MEDIUMbuffer overflow vulnerability in “secpolicydelete” commandEPSS 0.3%CVE-2023-4163MEDIUMPossible buffer overflow in portcfgfportbuffers in Brocade Fabric OSEPSS 0.3%CVE-2021-27798—privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xEPSS 0.2%