Edge SWG (formerly ProxySG), Management Center and Reporter vulnerability status in respect to CVE-2023-3454

Products

• ProxySG Software - SGOS
• Management Center
• Reporter

Issue/Introduction

Proxy administrators would like to determine if Edge SWG (formerly ProxySG), Management Center and Reporter devices are vulnerable to CVE-2023-3454.

Environment

Edge SWG (formerly ProxySG), Management Center and Reporter

Cause

Vulnerability Details

• CVE ID Number: CVE-2023-3454
• Component: Brocade Fabric OS
• Summary: Remote code execution (RCE) vulnerability
• Date Published: April 4th, 2024
• Description: Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch.
• Vector Assessment: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
• Base Score: N/A

 

Advisory Link(s)

• https://nvd.nist.gov/vuln/detail/CVE-2023-3454 
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23215 

Resolution

Vulnerability CVE-2023-3454 is specific to Brocade switches.

ProxySG, Management Center, and Reporter are not vulnerable to CVE-2023-3454.