CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-27797

CVSS 9.8v3.1pub. 2022-02-21upd. 2024-11-21

Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Broadcom Fabric Operating System

    OS
    Broadcom
    7.0.0 – 7.4.2h8.0.0 – 8.0.2f8.1.2 – 8.1.2h (excl.)8.2.1 – 8.2.1c (excl.)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-3596CRITICAL9.0PL ✓same product

Atak przez fałszowanie odpowiedzi w protokole RADIUS (RFC 2865) via kolizja MD5

CVE-2022-33186CRITICAL9.8PL ✓same product

Brocade Fabric OS — zdalne wykonanie poleceń bez uwierzytelnienia

CVE-2020-15373CRITICAL9.8PL ✓same product

Wielokrotne buffer overflow w REST API Brocade Fabric OS

CVE-2020-15371CRITICAL9.8PL ✓same product

Code injection i privilege escalation w Brocade Fabric OS

CVE-2020-15374CRITICAL9.8PL ✓same product

Reflected Input w REST API Brocade Fabric OS — podatność krytyczna