LenovoLENOVO:PS500201-BROCADE-FABRIC-OS-ADVISORY-NOSIDBrocade Fabric OS Advisory - Lenovo Support US
0.004 Low
EPSS
Percentile
74.1%
Lenovo Security Advisory: LEN-24765
Potential Impact: Privilege escalation, information disclosure, denial of service
Severity: High
Scope of Impact: Industry-wide
CVE Identifier: CVE-2018-6433, CVE-2018-6434, CVE-2018-6435, CVE-2018-6436, CVE-2018-6437, CVE-2018-6438, CVE-2018-6439, CVE-2018-6440, CVE-2018-6441, CVE-2018-6442
Summary Description:
Brocade has released multiple security advisories for vulnerabilities found in Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, and 7.4.2d that could allow privilege escalation, information disclosure, or denial of service.
Mitigation Strategy for Customers (what you should do to protect yourself):
Brocade recommends updating to the appropriate Brocade Fabric OS version (or newer) indicated in the Product Impact section below.
| Product | Minimum Fix Version | Last Updated |
|---|---|---|
| Lenovo Flex System FC5022 16Gb SAN Scalable Switch | 8.2.1 | 7.4.2d |
| Brocade 20-port 8Gb SAN Switch Module for BladeCenter | 8.2.1 | 7.4.2d |
| Brocade Converged 10GbE Switch Port Upgrade for BladeCenter | 8.2.1 | 7.4.2d |
****References:
<https://www.broadcom.com/support/fibre-channel-networking/security-advisories>
Revision History:
| Revision | Date | Description |
|---|---|---|
| 1 | 2018-11-29 | Initial release |
For a complete list of all Lenovo Product Security Advisories, click here.
For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.
Related
