PT-2021-9767 · Brocade · Brocade Fabric Os+1

Published 2021-06-09 · Updated 2021-08-23 · CVE-2020-15387

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2h Brocade Fabric OS versions prior to 8.2.1c Brocade Fabric OS versions prior to 8.2.2 Brocade Fabric OS versions prior to 9.0.0 Brocade SANnav versions prior to 2.1.1

Description The host SSH servers utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.

Recommendations For Brocade Fabric OS versions prior to 7.4.2h, update to version 7.4.2h or later. For Brocade Fabric OS versions prior to 8.2.1c, update to version 8.2.1c or later. For Brocade Fabric OS versions prior to 8.2.2, update to version 8.2.2 or later. For Brocade Fabric OS versions prior to 9.0.0, update to version 9.0.0 or later. For Brocade SANnav versions prior to 2.1.1, update to version 2.1.1 or later.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2020-15387

Affected Products

Brocade Fabric Os

Brocade Sannav

References · 4

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1291 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15387 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15387 · Security Note
• https://t.me/cvenotify/16000 · Telegram Post