CVE-2021-27792: High severity broadcom fabric operating system vulnerability
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to crash, requiring a reboot.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-27792?
CVE-2021-27792 is a vulnerability in Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h that allows an authenticated attacker to cause a service crash by exploiting a weakness in the handling of malformed user input in the web management interface.
How severe is CVE-2021-27792?
CVE-2021-27792 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2021-27792?
Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h are affected by CVE-2021-27792.
How can an attacker exploit CVE-2021-27792?
An authenticated attacker can exploit CVE-2021-27792 by sending malformed user input to the web management interface of affected Brocade Fabric OS versions, causing a service crash.
Are there any references for CVE-2021-27792?
Yes, you can find references for CVE-2021-27792 at the following links: [NetApp Security Advisory](https://security.netapp.com/advisory/ntap-20210819-0002/), [Brocade Security Advisory 2021-1490](https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490), [Brocade Security Advisory 2021-1492](https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492).