CVE-2020-15375

2020-12-1120:34:43

brocade

www.cve.org

0.0004 Low

EPSS

Percentile

5.1%

JSON

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow a local authenticated user to run arbitrary commands and perform escalation of privileges.

CNA Affected

[
  {
    "product": "Brocade Fabric OS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g"
      }
    ]
  }
]