CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2020-15373

CVSS 9.8v3.1pub. 2020-09-25upd. 2024-11-21

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Broadcom Fabric Operating System

    OS
    Broadcom
    8.2.18.2.1a8.2.1b8.2.1c8.2.1d8.2.28.2.2a8.2.2a18.2.2b8.2.2c
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth BypassMemory
CWE
References

Related vulnerabilities

CVE-2024-3596CRITICAL9.0PL ✓same product

Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5

CVE-2022-33186CRITICAL9.8PL ✓same product

Brocade Fabric OS — zdalne wykonanie poleceń bez uwierzytelnienia

CVE-2021-27797CRITICAL9.8PL ✓same product

Zakodowane na stałe dane uwierzytelniające w Brocade Fabric OS

CVE-2020-15374CRITICAL9.8PL ✓same product

Reflected Input w REST API Brocade Fabric OS — podatność krytyczna

CVE-2020-15371CRITICAL9.8PL ✓same product

Code injection i privilege escalation w Brocade Fabric OS