CVE-2021-27796

EPSS 0.31%
Veröffentlicht 21.02.2022 18:15:08
Zuletzt bearbeitet 21.11.2024 05:58:35
Quelle sirt@brocade.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Broadcom ≫ Fabric Operating System Version < 7.4.1d

Broadcom ≫ Fabric Operating System Version >= 8.0.0 < 8.0.1b

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.538

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	6.8	8	6.9	AV:N/AC:L/Au:S/C:C/I:N/A:N

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-27796

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-27796

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-27796

EUVD