CyberRota Analysis
AI-GeneratedBrocade ASCG versions prior to 3.5.0 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to exploit improperly sanitized archive entries. This can lead to arbitrary file writing in restricted locations on the host, potentially resulting in remote code execution. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting ingested archive files can leverage this flaw to write arbitrary files to restricted locations on the underlying host, potentially leading to remote code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)