CVE-2021-27791
Published: 12 August 2021
Summary
CVE-2021-27791 is a medium-severity Out-of-bounds Read (CWE-125) vulnerability in Broadcom Fabric Operating System. Its CVSS base score is 5.4 (Medium).
Operationally, ranked in the top 41.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-14532
Vulnerability details
The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses…
more
outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.