CVE-2023-31430

low-risk

Published 2023-08-02

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

Do I need to act?

0.03% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (2)

Brocade Fabric Operating System

Affected Vendors

Broadcom

References (4)

Third Party Advisory https://security.netapp.com/advisory/ntap-20230908-0007/

Vendor Advisory https://support.broadcom.com/external/content/SecurityAdvisories/0/22381

Third Party Advisory https://security.netapp.com/advisory/ntap-20230908-0007/

Vendor Advisory https://support.broadcom.com/external/content/SecurityAdvisories/0/22381

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 7/34 · Low