VULNERABILITY INTELLIGENCE
CVE-2023-5973
CVSS score4.3 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-04-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display.
Weakness classification
- sirt@brocade.com: CWE-346
- nvd@nist.gov: CWE-346
Primary references
- sirt@brocade.com — Third Party Advisory
- sirt@brocade.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory