CVE-2023-5973: Truncated port name

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-05 · updated 2026-06-17
Weakness: CWE-346

Description

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display.

Affected products

Brocade Fabric OS: from 9.0.0 before 9.2.0 — fixed in 9.2.0

How to fix

Upgrade to a fixed version: Brocade Fabric OS 9.2.0. Check the vendor advisory for mitigations.

References

https://security.netapp.com/advisory/ntap-20240628-0005/
https://support.broadcom.com/external/content/SecurityAdvisories/0/23214
https://security.netapp.com/advisory/ntap-20240628-0005/
https://support.broadcom.com/external/content/SecurityAdvisories/0/23214

Get alerted when CVE-2023-5973 or the next vulnerability affects your stack