Vulnerability · Published Aug 12, 2021 · Assigned by brocade

CVE-2021-27794

High 7.8

In plain English

A high-severity security flaw in Brocade Fabric OS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.2%top 84.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST.

Affected products (as reported)

VendorProductVersions
n/a Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h

References