CVE-2021-27797

Published: Feb 21, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the system.

Affected (4)

Products: Broadcom: Fabric Operating System

Broadcom

1 product

Fabric Operating System

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Broadcom Fabric Operating System	From 7.0.0 to 7.4.2h
Broadcom Fabric Operating System	From 8.0.0 to 8.0.2f
Broadcom Fabric Operating System	From 8.1.2 to 8.1.2h
Broadcom Fabric Operating System	From 8.2.1 to 8.2.1c

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1722

Source: sirt@brocade.com

Vendor Advisory

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1722

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.