CVE-2021-27791
mediumpriority · track · 22EPSS 0.006 · 49 %ileEUUSEPSS · scored 2026-10-27
The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (3)
Products and version ranges known to be affected.
- broadcom fabric operating system8.2.1 → 8.2.3anvdUScpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
- broadcom fabric operating system9.0.0 → 9.0.1anvdUScpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- https://security.netapp.com/advisory/ntap-20210819-0002/cnnvd
- https://support.lenovo.com/us/en/product_security/LEN-60182cnnvd
- https://vigilance.fr/vulnerability/Brocade-Fabric-OS-out-of-bounds-memory-reading-via-Authentication-Header-35439cnnvd
- https://www.broadcom.cn/support/fibre-channel-networking/security-advisoriesPatchcnnvd
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1491cnnvd
- https://security.netapp.com/advisory/ntap-20210819-0002/enisa_euvd
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1491enisa_euvd
- https://security.netapp.com/advisory/ntap-20210819-0002/Third Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan