CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2020-15374

CVSS 9.8v3.1pub. 2020-09-25upd. 2024-11-21

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Broadcom Fabric Operating System

    OS
    Broadcom
    8.2.18.2.1a8.2.1b8.2.1c8.2.1d8.2.28.2.2a8.2.2a18.2.2b8.2.2c
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-3596CRITICAL9.0PL ✓same product

Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5

CVE-2022-33186CRITICAL9.8PL ✓same product

Brocade Fabric OS — zdalne wykonanie poleceń bez uwierzytelnienia

CVE-2021-27797CRITICAL9.8PL ✓same product

Zakodowane na stałe dane uwierzytelniające w Brocade Fabric OS

CVE-2020-15373CRITICAL9.8PL ✓same product

Wielokrotne buffer overflow w REST API Brocade Fabric OS

CVE-2020-15371CRITICAL9.8PL ✓same product

Code injection i privilege escalation w Brocade Fabric OS