7.4
CVE-2020-15387
- EPSS 0.12%
- Published 09.06.2021 16:15:08
- Last modified 21.11.2024 05:05:27
- Source sirt@brocade.com
- Teams watchlist Login
- Open Login
The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.
Data is provided by the National Vulnerability Database (NVD)
Broadcom ≫ Brocade Sannav Version < 2.1.1
Broadcom ≫ Fabric Operating System Version < 7.4.2
Broadcom ≫ Fabric Operating System Version >= 8.2.0 < 8.2.1
Broadcom ≫ Fabric Operating System Version7.4.2
Broadcom ≫ Fabric Operating System Version7.4.2a
Broadcom ≫ Fabric Operating System Version7.4.2b
Broadcom ≫ Fabric Operating System Version7.4.2c
Broadcom ≫ Fabric Operating System Version7.4.2d
Broadcom ≫ Fabric Operating System Version7.4.2f
Broadcom ≫ Fabric Operating System Version7.4.2g
Broadcom ≫ Fabric Operating System Version8.2.1
Broadcom ≫ Fabric Operating System Version8.2.1a
Broadcom ≫ Fabric Operating System Version8.2.1b
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.284 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.4 | 2.2 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.