CVE-2021-27795: License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,
Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a counterfeit license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27795?
CVE-2021-27795 has been assessed to have a high severity due to its potential for exploitation by attackers to forge license keys.
How do I fix CVE-2021-27795?
To fix CVE-2021-27795, please ensure that you update your Brocade Fabric OS software to the latest version provided by Broadcom.
What are the potential risks associated with CVE-2021-27795?
The risks associated with CVE-2021-27795 include the installation of unauthorized licenses, leading to unauthorized access to systems and services.
Which devices are affected by CVE-2021-27795?
Devices running any version of Brocade Fabric OS that support the license string format are affected by CVE-2021-27795.
Is there a workaround for CVE-2021-27795?
Currently, there is no documented workaround for CVE-2021-27795 other than applying the necessary software updates.