6.8Medium

CVE-2023-5649

Brocade Brocade Active Support Connectivity Gateway Published: (1 month ago)

Description

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when collecting “supportsave” from a Brocade Switch.

Weakness (CWE): CWE-20

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:broadcom:brocade_active_support_connectivity_gateway:*:*:*:*:*:*:*:* < 3.0.0