CyberRota Analysis
AI-GeneratedBrocade Fabric OS versions prior to 10.0.1 are vulnerable due to an out-of-bounds memory read in the web management daemon, which fails to validate array index boundaries for specific URL query parameters. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted HTTP request, leading to a Denial of Service (DoS) that disrupts management-plane operations. Organizations using affected versions should prioritize patching to mitigate potential service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.
Related CVEs
Other vulnerabilities affecting the same vendor(s)