High severity8.6NVD Advisory· Published Aug 31, 2023· Updated Jun 17, 2026

CVE-2023-3489

Description

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Fabric Operating System
cpe:2.3:o:broadcom:fabric_operating_system:9.2.0:*:*:*:*:*:*:*
Brocade/Fabric OSllm-fuzzy2 versions
= 9.2.0+ 1 more
- (no CPE)range: = 9.2.0
- (no CPE)range: Brocade Fabric OS v9.2.0

Patches

Vulnerability mechanics

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22510nvdVendor Advisory
security.netapp.com/advisory/ntap-20231124-0003/nvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000