Lucene search

BrocadeCVE-2021-27795

HistoryDec 06, 2023 - 2:15 a.m.

CVE-2021-27795

2023-12-0602:15:06

CWE-327

brocade

web.nvd.nist.gov

brocade

fos

platform security

cryptographic issues

forged license keys

nvd

cve-2021-27795

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Brocade Fabric OS (FOS) hardware
platforms running any version of Brocade Fabric OS software, which
supports the license string format; contain cryptographic
issues that could allow for the installation of forged or fraudulent
license keys. This would allow attackers or a malicious party to forge a
counterfeit license key that the Brocade Fabric OS platform would
authenticate and activate as if it were a legitimate license key.

Affected configurations

Nvd

Node

broadcombrocade_300Match-

broadcombrocade_610Match-

broadcombrocade_6505Match-

broadcombrocade_6510Match-

broadcombrocade_6520Match-

broadcombrocade_7800Match-

broadcombrocade_7810Match-

broadcombrocade_7840Match-

broadcombrocade_g620Match-

broadcombrocade_g630Match-

broadcombrocade_x6-4_directorMatch-

broadcombrocade_x6-8_directorMatch-

AND

broadcomfabric_operating_system

VendorProductVersionCPE
broadcombrocade_300-cpe:2.3:h:broadcom:brocade_300:-:*:*:*:*:*:*:*
broadcombrocade_610-cpe:2.3:h:broadcom:brocade_610:-:*:*:*:*:*:*:*
broadcombrocade_6505-cpe:2.3:h:broadcom:brocade_6505:-:*:*:*:*:*:*:*
broadcombrocade_6510-cpe:2.3:h:broadcom:brocade_6510:-:*:*:*:*:*:*:*
broadcombrocade_6520-cpe:2.3:h:broadcom:brocade_6520:-:*:*:*:*:*:*:*
broadcombrocade_7800-cpe:2.3:h:broadcom:brocade_7800:-:*:*:*:*:*:*:*
broadcombrocade_7810-cpe:2.3:h:broadcom:brocade_7810:-:*:*:*:*:*:*:*
broadcombrocade_7840-cpe:2.3:h:broadcom:brocade_7840:-:*:*:*:*:*:*:*
broadcombrocade_g620-cpe:2.3:h:broadcom:brocade_g620:-:*:*:*:*:*:*:*
broadcombrocade_g630-cpe:2.3:h:broadcom:brocade_g630:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	brocade_300	-	cpe:2.3:h:broadcom:brocade_300:-:::::::*
broadcom	brocade_610	-	cpe:2.3:h:broadcom:brocade_610:-:::::::*
broadcom	brocade_6505	-	cpe:2.3:h:broadcom:brocade_6505:-:::::::*
broadcom	brocade_6510	-	cpe:2.3:h:broadcom:brocade_6510:-:::::::*
broadcom	brocade_6520	-	cpe:2.3:h:broadcom:brocade_6520:-:::::::*
broadcom	brocade_7800	-	cpe:2.3:h:broadcom:brocade_7800:-:::::::*
broadcom	brocade_7810	-	cpe:2.3:h:broadcom:brocade_7810:-:::::::*
broadcom	brocade_7840	-	cpe:2.3:h:broadcom:brocade_7840:-:::::::*
broadcom	brocade_g620	-	cpe:2.3:h:broadcom:brocade_g620:-:::::::*
broadcom	brocade_g630	-	cpe:2.3:h:broadcom:brocade_g630:-:::::::*

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Brocade Switches",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "All Version"
      }
    ]
  }
]

References

support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2021-27795