Database/Control plane, storage & DevOps

Brocade Fabric OS CLI: A remote authenticated attacker can act beyond their role through the Fabric OS CLI

CVE-2022-33183Control plane, storage & DevOpscurated

Impact

A remote authenticated attacker can act beyond their role through the Fabric OS CLI. SAN switches are routinely given shared operator accounts across a storage team, so role separation on FOS is thin to begin with; this removes what is left. Companion privilege escalation: CVE-2022-33182.

Who can reach it

Authenticated remote user on FOS before 9.1.0 / 9.0.1e / 8.2.3c / 8.2.0cbn5 / 7.4.2.j.

What to do

Fabric OS upgrade plus reboot per fabric. Move to individual named accounts with RBAC roles rather than a shared switch login — a config and process change worth doing regardless.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-33183 https://nvd.nist.gov/vuln/detail/CVE-2022-33182

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.