CyberRota Analysis
AI-GeneratedA critical authorization bypass vulnerability in the Management Server of Brocade Fabric OS versions prior to 10.0.1 allows compromised switches to send crafted management requests that bypass administrative authentication. This exploitation enables unauthorized peer switches to perform administrative actions, such as resetting passwords and rebooting systems. Organizations using affected versions of Brocade Fabric OS should prioritize immediate remediation to mitigate potential unauthorized access and control over their network infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Common Transport) management requests to bypass administrative authentication. Successful exploitation allows an unauthorized peer switch to execute administrative actions on the target device, including resetting administrative passwords, initiating system reboots, and triggering firmware downloads.
Related CVEs
Other vulnerabilities affecting the same vendor(s)