EUVD-2026-94679
GHSA-ph5j-f53x-2pfj
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Admin-only (PR:H) on the adjacent management network (AV:A), reliable trigger (AC:L); pure process-crash DoS gives A:H with no confidentiality or integrity impact.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
2DescriptionCVE.org
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).
AnalysisAI
Denial of service in Brocade Fabric OS before 10.0.1: an authenticated user holding administrative privileges on the switch can crash the diagnostic execution utility by passing a diagnostic command string containing an excessive number of tokenized arguments, which overflows a fixed-capacity argument array on the stack and terminates the process. The issue is reachable only from an adjacent network position such as the management LAN (AV:A) and requires pre-existing admin credentials (PR:H, no user interaction), so it is a medium-severity availability problem for already-privileged operators rather than a remote, unauthenticated compromise path; confidentiality and integrity of the device are unaffected, with the availability impact rated High. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated session with administrative access (PR:H) to Brocade Fabric OS and network reachability to the switch management plane from an adjacent network (AV:A), from which the attacker invokes the diagnostic execution utility with a crafted command string containing an abnormally high number of tokenized arguments. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a medium-severity, authenticated denial-of-service issue rather than a top-tier priority. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: Brocade Fabric OS 10.0.1, the version boundary at which the advisory stops listing affected releases; upgrade every switch running a pre-10.0.1 build to 10.0.1 or a later supported release, following the vendor's upgrade/downgrade compatibility notes and the advisory at https://support.broadcom.com/external/content/SecurityAdvisories/0/39152 to confirm the fixed build for each platform. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
OS command injection in the WebTools administrative interface of Brocade Fabric OS lets an authenticated, high-privilege
Stack-based buffer overflow in the SNMP daemon of Brocade Fabric OS (all versions before 10.0.1) lets a remote, unauthen
Command injection in the REST API management interface of Brocade Fabric OS allows an authenticated low-privileged user
Authenticated attackers with access to the adjacent management network can exploit stack-based buffer overflows in the R
An authenticated, low-privileged user in one Virtual Fabric on a Brocade Fabric OS switch can submit a request carrying
Heap corruption in Brocade Fabric OS before 10.0.1 allows an authenticated administrator to crash a SAN switch's managem
Authentication bypass in Brocade Fabric OS 9.2.2d and 10.0.0 through 10.0.0a1 allows a local low-privileged process to f
Local privilege escalation in Brocade Fabric OS (versions before 9.2.2d and 10.0.0 through 10.0.0a1) allows an unprivile
Command injection in the security certificate management component of the Brocade Fabric OS administrative management AP
An arbitrary file-move flaw in the WebTools management interface of Brocade Fabric OS (all builds before 9.2.2d and 10.0
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today