CVE-2023-31430CWE-120

buffer overflow vulnerability in “secpolicydelete” command

Medium · published August 1, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-08-01T23:31Z
EPSS history
Timeline
  • 01 AUG 23:31Z
    buffer overflow vulnerability in “secpolicydelete” command
    cvelistv5