Does CVE-2022-38023 have any effect on Brocade products
Applies to
- Brocade
- Windows
- Netlogon (NTLM Authentication)
- CVE-2022-38023- Netlogon RPC Elevation of Privilege Vulnerability
Answer
- SAN switches can authenticate using LDAP to query accounts in active directory, but No Brocade product utilizes Netlogon RPC, a Windows Server process.
- No Brocade Fibre Channel Products/ Manageability products from Broadcom products are currently known to be affected by Netlogon Elevation of Privilege Vulnerability CVE-2022-38023
- However, the environment in which the products operate is beyond Brocade's control, hence Brocade advises using vendor recommendations/ workarounds.