CVE-2020-15387

Published: Jun 9, 2021Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.

Affected (13)

Products: Broadcom: Brocade Sannav, Fabric Operating System

Broadcom

2 products

Brocade Sannav

Fabric Operating System

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brocade Sannav	Before 2.1.1
Broadcom Fabric Operating System	Before 7.4.2
Broadcom Fabric Operating System	From 8.2.0 to 8.2.1
Broadcom Fabric Operating System	Version 7.4.2
Broadcom Fabric Operating System	Version 7.4.2a
Broadcom Fabric Operating System	Version 7.4.2b
Broadcom Fabric Operating System	Version 7.4.2c
Broadcom Fabric Operating System	Version 7.4.2d
Broadcom Fabric Operating System	Version 7.4.2f
Broadcom Fabric Operating System	Version 7.4.2g
Broadcom Fabric Operating System	Version 8.2.1
Broadcom Fabric Operating System	Version 8.2.1a
Broadcom Fabric Operating System	Version 8.2.1b

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1291

Source: sirt@brocade.com

Vendor Advisory

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1291

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.