CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-27794
https://notcve.org/view.php?id=CVE-2021-27794
A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST. Una vulnerabilidad en el mecanismo de autenticación de las versiones de Brocade Fabric OS anteriores a Brocade Fabric OS v.9.0.1a, v8.2.3a y v7.4.2h, podía permitir a un usuario iniciar sesión con una contraseña vacía y no válida mediante telnet, ssh y REST • https://security.netapp.com/advisory/ntap-20210819-0001 https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1552 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-27792
https://notcve.org/view.php?id=CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to crash, requiring a reboot. Las funciones de manejo de solicitudes en la interfaz de administración web de las versiones del sistema operativo Brocade Fabric anteriores a las versiones v9.0.1a, v8.2.3a y v7.4.2h no manejan adecuadamente la entrada de usuario con formato incorrecto, lo que resulta en un bloqueo del servicio. Un atacante autenticado podría usar esta debilidad para hacer que el controlador de la aplicación HTTP de FOS se bloquee, requiriendo un reinicio. • https://security.netapp.com/advisory/ntap-20210819-0002 https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490 https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492 •
CVSS: 5.3EPSS: 0%CPEs: 5EXPL: 0CVE-2021-27793
https://notcve.org/view.php?id=CVE-2021-27793
ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0 could cause a user with a valid account to be unable to log into the switch. Un fallo de autorización intermitente en aaa tacacs+ con las versiones de Brocade Fabric OS anteriores a v9.0.1b y posteriores a 9.0.0, también en Brocade Fabric OS versiones anteriores a v8.2.3a y posteriores a v8.2.0, podría causar que un usuario con una cuenta válida no pudiera iniciar sesión en el switch • https://security.netapp.com/advisory/ntap-20210819-0001 https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1553 • CWE-863: Incorrect Authorization •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2020-15386
https://notcve.org/view.php?id=CVE-2020-15386
Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could lead to a slower response to CLI commands and other operations. Brocade Fabric OS versiones anteriores a v9.0.1a y 8.2.3a y posteriores a v9.0.0 y 8.2.2d, puede observar una alta carga de la CPU durante un escaneo de seguridad, lo que podría conllevar una respuesta más lenta a los comandos CLI y otras operaciones • https://security.netapp.com/advisory/ntap-20210819-0002 https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1495 •
CVSS: 7.4EPSS: 0%CPEs: 13EXPL: 0CVE-2020-15387
https://notcve.org/view.php?id=CVE-2020-15387
The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications. Los servidores SSH del host de Brocade Fabric OS versiones anteriores a v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, y Brocade SANnav versiones anteriores a v2.1.1, utilizan claves de menos de 2048 bits, que pueden ser vulnerables a ataques de tipo man-in-the-middle y/o a comunicaciones SSH no seguras • https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1291 • CWE-326: Inadequate Encryption Strength •