CVE-2021-27792

The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to crash, requiring a reboot.

• https://security.netapp.com/advisory/ntap-20210819-0002/Third Party Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490Vendor Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492Vendor Advisory
• https://security.netapp.com/advisory/ntap-20210819-0002/Third Party Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490Vendor Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492Vendor Advisory

Published

Aug 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-27785HCL Commerce's Remote Store server could allow a local attac…5
• CVE-2021-27786Cross-origin resource sharing (CORS) enables browsers to per…9.8
• CVE-2021-27788HCL Verse is susceptible to a Cross Site Scripting (XSS) vul…6.1
• CVE-2021-27789The Web application of Brocade Fabric OS before versions Bro…6.5
• CVE-2021-27790The command ipfilter in Brocade Fabric OS before Brocade Fab…7.8
• CVE-2021-27791The function that is used to parse the Authentication header…5.4
• CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3
• CVE-2021-27794A vulnerability in the authentication mechanism of Brocade F…7.8
• CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
• CVE-2021-27796A vulnerability in Brocade Fabric OS versions before Brocade…6.5
• CVE-2021-27797Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h,…9.8
• CVE-2021-27798A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3…5.5