8.1

CVE-2021-27795

License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, 

Brocade Fabric OS (FOS) hardware 
platforms running any version of Brocade Fabric OS software, which 
supports the license string format; contain cryptographic 
issues that could allow for the installation of forged or fraudulent 
license keys. This would allow attackers or a malicious party to forge a
 counterfeit license key that the Brocade Fabric OS platform would 
authenticate and activate as if it were a legitimate license key.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Fabric Operating System
   Broadcom ≫ Brocade 300 Version -
   Broadcom ≫ Brocade 610 Version -
   Broadcom ≫ Brocade 6505 Version -
   Broadcom ≫ Brocade 6510 Version -
   Broadcom ≫ Brocade 6520 Version -
   Broadcom ≫ Brocade 7800 Version -
   Broadcom ≫ Brocade 7810 Version -
   Broadcom ≫ Brocade 7840 Version -
   Broadcom ≫ Brocade G620 Version -
   Broadcom ≫ Brocade G630 Version -
   Broadcom ≫ Brocade X6-4 Director Version -
   Broadcom ≫ Brocade X6-8 Director Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.152
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Brocade 6.4 1.6 4.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-327 Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289
Vendor Advisory