BSA-2020-1080

2020-09-0800:00:00

Broadcom Security Response

support.broadcom.com

9.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.0%

JSON

Security Advisory ID : BSA-2020-1080

Component : seccryptocfg templates

Revision : 2.0

Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injection and privilege escalation vulnerability. The vulnerability could allow an unauthenticated, remote attacker to perform via seccryptocfg templates to perform code injection and privilege escalation.

Note: Brocade Fabric OS versions prior to v8.0.0 are not vulnerable. Fabric OS versions 7.4.2x are not impacted by this vulnerability

Affected Products

Brocade Fabric OS versions after v8.0.0 and before Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3.