Lucene search

K
nvd[email protected]NVD:CVE-2020-15373
HistorySep 25, 2020 - 2:15 p.m.

CVE-2020-15373

2020-09-2514:15:13
CWE-119
web.nvd.nist.gov
1
buffer overflow
brocade fabric os
rest api
remote attacks

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

77.3%

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks.

Affected configurations

Nvd
Node
broadcomfabric_operating_systemMatch8.2.1
OR
broadcomfabric_operating_systemMatch8.2.1a
OR
broadcomfabric_operating_systemMatch8.2.1b
OR
broadcomfabric_operating_systemMatch8.2.1c
OR
broadcomfabric_operating_systemMatch8.2.1d
OR
broadcomfabric_operating_systemMatch8.2.2
OR
broadcomfabric_operating_systemMatch8.2.2a
OR
broadcomfabric_operating_systemMatch8.2.2a1
OR
broadcomfabric_operating_systemMatch8.2.2b
OR
broadcomfabric_operating_systemMatch8.2.2c
VendorProductVersionCPE
broadcomfabric_operating_system8.2.1cpe:2.3:o:broadcom:fabric_operating_system:8.2.1:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.1acpe:2.3:o:broadcom:fabric_operating_system:8.2.1a:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.1bcpe:2.3:o:broadcom:fabric_operating_system:8.2.1b:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.1ccpe:2.3:o:broadcom:fabric_operating_system:8.2.1c:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.1dcpe:2.3:o:broadcom:fabric_operating_system:8.2.1d:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.2cpe:2.3:o:broadcom:fabric_operating_system:8.2.2:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.2acpe:2.3:o:broadcom:fabric_operating_system:8.2.2a:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.2a1cpe:2.3:o:broadcom:fabric_operating_system:8.2.2a1:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.2bcpe:2.3:o:broadcom:fabric_operating_system:8.2.2b:*:*:*:*:*:*:*
broadcomfabric_operating_system8.2.2ccpe:2.3:o:broadcom:fabric_operating_system:8.2.2c:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

77.3%

Related for NVD:CVE-2020-15373