CVE-2021-27795 - Vulnerability Details

Vendors	Products
Broadcom	Brocade 300 Brocade 610 Brocade 6505 Brocade 6510 Brocade 6520 Brocade 7800 Brocade 7810 Brocade 7840 Brocade G620 Brocade G630 Brocade X6-4 Director Brocade X6-8 Director Fabric Operating System

Link	Providers
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-27795", "assignerOrgId": "87b297d7-335e-4844-9551-11b97995a791", "state": "PUBLISHED", "assignerShortName": "brocade", "dateReserved": "2021-02-26T20:18:01.346Z", "datePublished": "2023-12-06T01:16:07.122Z", "dateUpdated": "2024-08-03T21:33:15.653Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Brocade Switches", "vendor": "Brocade", "versions": [{"status": "affected", "version": "All Version"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<div>\nBrocade Fabric OS (FOS) hardware \nplatforms running any version of Brocade Fabric OS software, which \nsupports the license string format; contain cryptographic \nissues that could allow for the installation of forged or fraudulent \nlicense keys. This would allow attackers or a malicious party to forge a\n counterfeit license key that the Brocade Fabric OS platform would \nauthenticate and activate as if it were a legitimate license key. <br><br></div>"}], "value": "Brocade Fabric OS (FOS) hardware \nplatforms running any version of Brocade Fabric OS software, which \nsupports the license string format; contain cryptographic \nissues that could allow for the installation of forged or fraudulent \nlicense keys. This would allow attackers or a malicious party to forge a\n counterfeit license key that the Brocade Fabric OS platform would \nauthenticate and activate as if it were a legitimate license key. \n\n\n\n"}], "impacts": [{"capecId": "CAPEC-20", "descriptions": [{"lang": "en", "value": "CAPEC-20 Encryption Brute Forcing"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-327", "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "87b297d7-335e-4844-9551-11b97995a791", "shortName": "brocade", "dateUpdated": "2023-12-06T01:16:07.122Z"}, "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289"}], "source": {"discovery": "UNKNOWN"}, "title": "License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, ", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:33:15.653Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2021-27795 (string)

assignerOrgId : 87b297d7-335e-4844-9551-11b97995a791 (string)

state : PUBLISHED (string)

assignerShortName : brocade (string)

dateReserved : 2021-02-26T20:18:01.346Z (string)

datePublished : 2023-12-06T01:16:07.122Z (string)

dateUpdated : 2024-08-03T21:33:15.653Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Brocade Switches (string)

vendor : Brocade (string)

versions : [ »

0 : { »

status : affected (string)

version : All Version (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : <div> Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a counterfeit license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key. <br><br></div> (string)

}

]

value : Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a counterfeit license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-20 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-20 Encryption Brute Forcing (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-327 (string)

description : CWE-327 Use of a Broken or Risky Cryptographic Algorithm (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 87b297d7-335e-4844-9551-11b97995a791 (string)

shortName : brocade (string)

dateUpdated : 2023-12-06T01:16:07.122Z (string)

}

references : [ »

0 : { »

url : https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T21:33:15.653Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A924BA8-278D-42F8-9A38-AE1087384629", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:broadcom:brocade_300:-:*:*:*:*:*:*:*", "matchCriteriaId": "514B80C9-FB9A-46FF-A58F-F90D695CD6EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_610:-:*:*:*:*:*:*:*", "matchCriteriaId": "71B3C11A-72A1-40E7-8062-FDCE8B31BF45", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_6505:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFE32859-8F51-41C0-829F-E2C7C70D2B32", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_6510:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB73E604-D2BA-463E-8F89-B6FA2D762C49", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_6520:-:*:*:*:*:*:*:*", "matchCriteriaId": "1AD15038-420D-456C-9E46-1F68730D5294", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_7800:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3E8C687-7999-4FC9-B6F0-8235808B2113", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_7810:-:*:*:*:*:*:*:*", "matchCriteriaId": "E297EC07-ACD9-44CB-A52E-E8D77F1AB3B8", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_7840:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A3BC204-ED15-4F07-A493-D688A02E2AF4", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_g620:-:*:*:*:*:*:*:*", "matchCriteriaId": "D3C167A2-3A1D-4A7C-8BB0-E923F774DAE2", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_g630:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CBE84E8-4D66-4CE7-B6D9-F67F92014C5C", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_x6-4_director:-:*:*:*:*:*:*:*", "matchCriteriaId": "03D3425B-AADB-4507-9D9D-907BD49359B0", "vulnerable": false}, {"criteria": "cpe:2.3:h:broadcom:brocade_x6-8_director:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FF27302-C9A5-4C62-B97D-BFEDAE2F9F5E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Brocade Fabric OS (FOS) hardware \nplatforms running any version of Brocade Fabric OS software, which \nsupports the license string format; contain cryptographic \nissues that could allow for the installation of forged or fraudulent \nlicense keys. This would allow attackers or a malicious party to forge a\n counterfeit license key that the Brocade Fabric OS platform would \nauthenticate and activate as if it were a legitimate license key. \n\n\n\n"}, {"lang": "es", "value": "Plataformas de hardware Brocade Fabric OS (FOS) que ejecutan cualquier versi\u00f3n del software Brocade Fabric OS, que admita el formato de cadena de licencia; contienen problemas criptogr\u00e1ficos que podr\u00edan permitir la instalaci\u00f3n de claves de licencia falsificadas o fraudulentas. Esto permitir\u00eda a los atacantes o a una parte malintencionada falsificar una clave de licencia falsa que la plataforma Brocade Fabric OS autenticar\u00eda y activar\u00eda como si fuera una clave de licencia leg\u00edtima."}], "id": "CVE-2021-27795", "lastModified": "2024-11-21T05:58:34.920", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 4.7, "source": "sirt@brocade.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-12-06T02:15:06.573", "references": [{"source": "sirt@brocade.com", "tags": ["Vendor Advisory"], "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289"}], "sourceIdentifier": "sirt@brocade.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-327"}], "source": "sirt@brocade.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-327"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A924BA8-278D-42F8-9A38-AE1087384629 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:broadcom:brocade_300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 514B80C9-FB9A-46FF-A58F-F90D695CD6EF (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:broadcom:brocade_610:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 71B3C11A-72A1-40E7-8062-FDCE8B31BF45 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:broadcom:brocade_6505:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BFE32859-8F51-41C0-829F-E2C7C70D2B32 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:broadcom:brocade_6510:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EB73E604-D2BA-463E-8F89-B6FA2D762C49 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:broadcom:brocade_6520:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1AD15038-420D-456C-9E46-1F68730D5294 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:broadcom:brocade_7800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A3E8C687-7999-4FC9-B6F0-8235808B2113 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:broadcom:brocade_7810:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E297EC07-ACD9-44CB-A52E-E8D77F1AB3B8 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:broadcom:brocade_7840:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A3BC204-ED15-4F07-A493-D688A02E2AF4 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:broadcom:brocade_g620:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D3C167A2-3A1D-4A7C-8BB0-E923F774DAE2 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:broadcom:brocade_g630:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3CBE84E8-4D66-4CE7-B6D9-F67F92014C5C (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:broadcom:brocade_x6-4_director:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 03D3425B-AADB-4507-9D9D-907BD49359B0 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:broadcom:brocade_x6-8_director:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1FF27302-C9A5-4C62-B97D-BFEDAE2F9F5E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a counterfeit license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key. (string)

}

1 : { »

lang : es (string)

value : Plataformas de hardware Brocade Fabric OS (FOS) que ejecutan cualquier versión del software Brocade Fabric OS, que admita el formato de cadena de licencia; contienen problemas criptográficos que podrían permitir la instalación de claves de licencia falsificadas o fraudulentas. Esto permitiría a los atacantes o a una parte malintencionada falsificar una clave de licencia falsa que la plataforma Brocade Fabric OS autenticaría y activaría como si fuera una clave de licencia legítima. (string)

}

]

id : CVE-2021-27795 (string)

lastModified : 2024-11-21T05:58:34.920 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 6.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 4.7 (number)

source : sirt@brocade.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.1 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-12-06T02:15:06.573 (string)

references : [ »

0 : { »

source : sirt@brocade.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289 (string)

}

]

sourceIdentifier : sirt@brocade.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-327 (string)

}

]

source : sirt@brocade.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-327 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction Required

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction Required

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object