CVE-2021-27796
mediumpriority · track · 26EPSS 0.009 · 60 %ileEUUSEPSS · scored 2026-10-27
A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (3)
Products and version ranges known to be affected.
- n/a Brocade FABRIC OS≤ Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1denisa_euvdEU
- broadcom fabric operating system< 7.4.1dnvdUScpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
- broadcom fabric operating system8.0.0 → 8.0.1bnvdUScpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2021-27796/cnnvd
- https://support.lenovo.com/us/en/product_security/LEN-79718cnnvd
- https://vigilance.fr/vulnerability/Brocade-Fabric-OS-file-reading-via-rbash-37593cnnvd
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022032305cnnvd
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721enisa_euvd
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan