Lucene search

K
cve[email protected]CVE-2021-27798
HistoryAug 05, 2022 - 4:15 p.m.

CVE-2021-27798

2022-08-0516:15:10
CWE-22
web.nvd.nist.gov
42
3
brocade
fabric os
vulnerability
cve-2021-27798
directory transversal
nvd
security advisory
end of life
upgrade

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

A vulnerability in Brocade Fabric OS versions v7.4.1b and v7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions v7.4.1.x and v7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life Publish report

Affected configurations

NVD
Node
broadcomfabric_operating_systemMatch7.3.1d
OR
broadcomfabric_operating_systemMatch7.4.1b

CNA Affected

[
  {
    "product": "Brocade Fabric OS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Brocade Fabric OS versions Brocade Fabric OS v7.4.1b, and v7.3.1d."
      }
    ]
  }
]

Social References

More

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

Related for CVE-2021-27798