CVE-2020-15375

🗓️ 11 Dec 2020 20:34:43Reported by brocadeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 54 Views

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow a local authenticated user to run arbitrary commands and perform escalation of privileges

Reporter	Title	Published	Views	Family All 10
Broadcom	BSA-2020-1083	8 Sep 202000:00	–	broadcom
Circl	CVE-2020-15375	12 Dec 202000:36	–	circl
CNVD	Brocade Fabric OS Input Validation Error Vulnerability	14 Dec 202000:00	–	cnvd
Cvelist	CVE-2020-15375	11 Dec 202020:34	–	cvelist
EUVD	EUVD-2020-7370	7 Oct 202500:30	–	euvd
Lenovo	Brocade Fabric OS and SANnav Vulnerabilities - Lenovo Support US	6 Sep 202019:48	–	lenovo
Lenovo	Brocade Fabric OS and SANnav Vulnerabilities - Lenovo Support US	6 Sep 202019:48	–	lenovo
NCSC	Vulnerabilities fixed in Brocade Fabric OS	17 Dec 202000:00	–	ncsc
NVD	CVE-2020-15375	11 Dec 202021:15	–	nvd
Prion	Input validation	11 Dec 202021:15	–	prion

NVD

Node

broadcom fabric_operating_systemRange<7.4.2g

broadcom fabric_operating_systemRange8.0.0–8.1.2k

broadcom fabric_operating_systemRange8.2.0–8.2.0_cbn3

broadcom fabric_operating_systemRange8.2.1–8.2.1e

broadcom fabric_operating_systemRange8.2.2b–8.2.2c

[
  {
    "product": "Brocade Fabric OS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g"
      }
    ]
  }
]

Source	Link
broadcom	www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1083

21 Nov 2024 05:05Current

8.1High risk

Vulners AI Score8.1

CVSS 24.6

CVSS 3.16.7

EPSS0.00049

CWE-20

cve-2020-15375 brocade fabric os input validation command line interface secccrypptocfg escalation of privileges nvd