Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
firmwaredownload command could log servers passwords in clear text
Vulnerability Description
The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
敏感数据的明文存储
Vulnerability Title
Brocade Fabric OS 安全漏洞
Vulnerability Description
Brocade Fabric OS（FOS）是美国博科（Brocade）公司的一套使用在交换机和路由器等设备中的嵌入式操作系统。 Brocade Fabric OS v9.2.0版本存在安全漏洞，该漏洞源于当执行从 Fabric OS v9.2.0 降级到任何早期版本的 Fabric OS 时，Brocade Fabric OS v9.2.0 上的firmwaredownload 命令可以在 SupportSave 文件中以明文形式记录 FTP/SFTP/SCP 服务器密码。
CVSS Information
N/A
Vulnerability Type
N/A