Vulnerability · Published Aug 12, 2021 · Assigned by brocade
CVE-2021-27792
High 7.8
In plain English
A high-severity security flaw in Brocade Fabric OS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 80.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to crash, requiring a reboot.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Brocade Fabric OS | Brocade Fabric OS versions before v9.0.1a, and v8.2.3a, and v7.4.2h |
References
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210819-0002/ x_refsource_CONFIRM
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492 x_refsource_MISC