CVE-2023-4162: Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0

Published Aug 31, 2023
·
Updated

A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“.

Affected Software

2 affected components
Brocade Fabric Operating System>=9.0.1a<9.2.0a
Broadcom Fabric Operating System>=9.0.1a<9.2.0a

Event History

Aug 31, 2023
CVE Published
via MITRE·12:14 AM
Data Sourced
via MITRE·12:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2023-4162?

CVE-2023-4162 is a vulnerability that can cause a segmentation fault in Brocade Fabric OS, versions v9.0 to v9.2.0a, through the passwdcfg command.

2

How severe is CVE-2023-4162?

CVE-2023-4162 has a severity value of 4.4, which is classified as medium severity.

3

What is the affected software for CVE-2023-4162?

The affected software for CVE-2023-4162 is Brocade Fabric Operating System, versions v9.0.1a to v9.2.0a.

4

How can an attacker exploit CVE-2023-4162?

An attacker can exploit CVE-2023-4162 by using the cli command 'passwdcfg --set -expire -minDiff' on a Brocade Fabric OS switch as an authenticated privileged user.

5

Is there a fix for CVE-2023-4162?

Yes, a fix for CVE-2023-4162 is available. Please refer to the reference link for more information.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203