Dell Security Update -14 November 2022

Dell has released a security update to fix a critical vulnerability that affects Connectrix (Brocade) FOS.

Brocade Fabric OS versions before v9.1.1_01, v9.0.1e1, v8.2.3c1, and v7.4.2j1 could allow the unauthenticated remote attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling the switch, disabling ports, and modifying the switch IP address.
Brocade Fabric Operating System Firmware Vulnerability (CVE-2022-33186)
• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

Vulnerabilities
  • CVE-2022-33186
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Dell Security Advisory for CVE-2022-33186

References