CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in the Internet Key Exchange (IKEv2) protocol handler affects Brocade Fabric OS versions prior to 10.0.1, specifically on extension switches or blades utilizing IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted UDP packet, leading to a denial of service through a crash of the data-plane process. Organizations using affected versions of Brocade Fabric OS should prioritize patching to mitigate potential disruptions to their network services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)
Related CVEs
Other vulnerabilities affecting the same vendor(s)