CVE-2021-27796

published 2022-02-21

CVE-2021-27796: A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell…

Priority P3 36 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
broadcom	fabric_operating_system	< 7.4.1d	7.4.1d
broadcom	fabric_operating_system	>= 8.0.0 < 8.0.1b	8.0.1b

CVSS provenance

nvd v3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 6.8 MEDIUM AV:N/AC:L/Au:S/C:C/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.