PT-2022-9873 · Brocade · Brocade Fabric Os

Cody Martin · Published 2022-02-21 · Updated 2022-03-01 · CVE-2021-27796

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions before 8.0.1b Brocade Fabric OS versions before 7.4.1d

Description A vulnerability could allow an authenticated attacker within the restricted shell environment (rbash) as either the user or factory account, to read the contents of any file on the filesystem utilizing one of a few available binaries.

Recommendations For Brocade Fabric OS versions before 8.0.1b, update to version 8.0.1b or later. For Brocade Fabric OS versions before 7.4.1d, update to version 7.4.1d or later.

Fix

Related Identifiers

CVE-2021-27796

Affected Products

Brocade Fabric Os

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-27796 · Security Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27796 · Vendor Advisory
• https://t.me/cibsecurity/37866 · Telegram Post