Brocade Fabric OS (config and secnotify processes): Running a routine security scan against the SAN switch crashes

Impact

Running a routine security scan against the SAN switch crashes the config and secnotify processes. Worth carrying because it inverts the usual advice: the compliance activity you are required to perform is itself the outage. Operators who scan their storage fabric on a schedule have been taking unexplained SAN switch faults from their own tooling.

Who can reach it

Any security scanner reaching the switch's management services — no attacker required.

What to do

Fabric OS upgrade to v9.0.0 / v8.2.2d / v8.2.1e or later, firmware install plus reboot. Until then, exclude FOS management addresses from automated vulnerability scans or scan them only in a maintenance window.

References