Skip to content
OpenAdvisories
Unscored CVE-2021-27790 EUVD-2021-14531GHSA-qp38-g7j8-6pgx

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string functi…

Published Aug 12, 2021 · Updated Aug 3, 2024 · Assigned by brocade

Description

The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as the root user account.

Affected products

VendorProductAffectedFixed
— Brocade Fabric OS Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h —

References