PT-2022-9874 · Brocade · Brocade Fabric Os

Cody Martin · Published 2022-02-21 · Updated 2022-03-01 · CVE-2021-27797

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1c Brocade Fabric OS versions prior to 8.1.2h Brocade Fabric OS version 8.0.x Brocade Fabric OS version 7.x

Description The issue concerns documented hard-coded credentials in Brocade Fabric OS, which could allow attackers to gain access to the system.

Recommendations For Brocade Fabric OS versions prior to 8.2.1c, update to version 8.2.1c or later. For Brocade Fabric OS versions prior to 8.1.2h, update to version 8.1.2h or later. For Brocade Fabric OS version 8.0.x, update to a version outside of the 8.0.x range. For Brocade Fabric OS version 7.x, update to a version outside of the 7.x range.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2021-27797

Affected Products

Brocade Fabric Os

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-27797 · Security Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1722 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27797 · Vendor Advisory
• https://t.me/cibsecurity/37870 · Telegram Post