CVE-2021-27797
Last modified
CVE-2021-27797 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the system.. EPSS estimates a 1.33% chance of exploitation in the next 30 days.
Description
Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the system.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Fabric Operating System | >= 7.0.0, <= 7.4.2h |
| Broadcom | Fabric Operating System | >= 8.0.0, <= 8.0.2f |
| Broadcom | Fabric Operating System | >= 8.1.2, < 8.1.2h |
| Broadcom | Fabric Operating System | >= 8.2.1, < 8.2.1c |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-27797?
How severe is CVE-2021-27797?
How do I fix CVE-2021-27797?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-27791The function that is used to parse the Authentication header…5.4
- CVE-2021-27792The request handling functions in web management interface o…7.8
- CVE-2021-27793ntermittent authorization failure in aaa tacacs+ with Brocad…5.3
- CVE-2021-27794A vulnerability in the authentication mechanism of Brocade F…7.8
- CVE-2021-27795Brocade Fabric OS (FOS) hardware platforms running any vers…8.1
- CVE-2021-27796A vulnerability in Brocade Fabric OS versions before Brocade…6.5
- CVE-2021-27798A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3…5.5
- CVE-2021-27799ean_leading_zeroes in backend/upcean.c in Zint Barcode Gener…7.5
- CVE-2021-27802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-27803A vulnerability was discovered in how p2p/p2p_pd.c in wpa_su…7.5
- CVE-2021-27804JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory c…9.8
- CVE-2021-27807A carefully crafted PDF file can trigger an infinite loop wh…5.5
Are you affected by CVE-2021-27797?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST