8.5
Élevée
CVE-2024-7517 A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms…
Description
A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extension platforms: Brocade 7810, Brocade 7840, Brocade 7850 and on Brocade X6 or X7 directors with an SX-6 Extension blade installed. The attacker must be logged into the switch via SSH or serial console to conduct the attack.
Produits et versions touchés
Autres CVE de Fabric OS
Les 71 CVE de Fabric OS →
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before…
7.7
Élevée
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or…
6.9
Moyenne
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines…
5.4
Moyenne
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade…
5.9
Moyenne