CVE-2021-27796
Last modified
CVE-2021-27796 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.. EPSS estimates a 0.89% chance of exploitation in the next 30 days.
Description
A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | < 7.4.1d |
| Broadcom | Fabric Operating System | >= 8.0.0, < 8.0.1b |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-27796?
How severe is CVE-2021-27796?
How do I fix CVE-2021-27796?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-27790The command ipfilter in Brocade Fabric OS before Brocade Fab…7.8
- CVE-2021-27791The function that is used to parse the Authentication header…5.4
- CVE-2021-27792The request handling functions in web management interface o…7.8
- CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3
- CVE-2021-27794A vulnerability in the authentication mechanism of Brocade F…7.8
- CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
- CVE-2021-27797Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h,…9.8
- CVE-2021-27798A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3…5.5
- CVE-2021-27799ean_leading_zeroes in backend/upcean.c in Zint Barcode Gener…7.5
- CVE-2021-27802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-27803A vulnerability was discovered in how p2p/p2p_pd.c in wpa_su…7.5
- CVE-2021-27804JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory c…9.8
Are you affected by CVE-2021-27796?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST