Authentication Mechanism Flaw in Brocade Fabric OS Affecting Multiple Versions
CVE-2021-27794

7.8HIGH

Key Information:

Vendor
Broadcom
Status
Brocade Fabric Os
Vendor
CVE Published:
12 August 2021

Summary

An authentication flaw in Brocade Fabric OS versions prior to v9.0.1a, v8.2.3a, and v7.4.2h could permit unauthorized users to access the system. This flaw allows individuals to log in using an empty password or an incorrect password through protocols such as telnet, SSH, and REST, thus compromising the integrity and security of the network management functionalities.

Affected Version(s)

Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h

References

https://www.broadcom.com/support/fibre-channel-networking...
x_refsource_MISC
https://security.netapp.com/advisory/ntap-20210819-0001/
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.