Brocade Communications Systems, Inc. vulnerabilities
27 vulnerabilities
Known vulnerabilities in Brocade Communications Systems, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
Products
9- Brocade Fabric OS12 vulnerabilities
- Brocade Sannav6 vulnerabilities
- Brocade Network Advisor3 vulnerabilities
- Fibre Channel SAN Products Running Brocade Fabric OS (Fos).1 vulnerabilities
- Netiron Xmr/Mlx And Brocade Ces/Cer On Netiron1 vulnerabilities
- Ruckus Networks Solo Aps And SZ Managed Aps1 vulnerabilities
- Ruckus Networks Unleashed Aps And Zone Director1 vulnerabilities
- Zone Director Controller And Unleashed AP1 vulnerabilities
- Zone Director Controller1 vulnerabilities
CVE-2018-6437broadcomfabric_operating_system+1
EPSS score0.36%
A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6443brocade communications systems, inc.brocade network advisor+2EPSS score7.40%
A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.CVE-2018-6440broadcomfabric_operating_system+1EPSS score2.18%
A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack.CVE-2018-6435broadcomfabric_operating_system+1EPSS score0.36%
A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access.CVE-2018-6444brocade communications systems, inc.brocade network advisor+2EPSS score3.27%
A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrary OS Commands.CVE-2018-6434broadcomfabric_operating_system+1EPSS score1.21%
A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID.CVE-2018-6441broadcomfabric_operating_system+1EPSS score0.39%
A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell.CVE-2018-6436broadcomfabric_operating_system+1EPSS score0.36%
A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6433broadcomfabric_operating_system+1EPSS score0.34%
A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and initiate a file copy from the source to a remote system.CVE-2018-6438broadcomfabric_operating_system+1EPSS score0.36%
A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6439broadcomfabric_operating_system+1EPSS score0.35%
A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.CVE-2018-6442broadcomfabric_operating_system+1EPSS score2.14%
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.CVE-2018-6445brocade communications systems, inc.brocade network advisor+2EPSS score1.67%
A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.CVE-2016-8202broadcomfabric_operating_system+1EPSS score3.05%
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.CVE-2016-8209brocade communications systems, inc.netiron xmr/mlx and brocade ces/cer on netiron+4EPSS score1.07%
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.CVE-2017-6223brocade communications systems, inc.zone director controller firmware+1EPSS score1.72%
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.CVE-2017-6230brocade communications systems, inc.ruckus networks solo aps and sz managed aps+2EPSS score2.27%
Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could allow authenticated valid users to execute privileged commands on the respective systems.CVE-2017-6229brocade communications systems, inc.ruckus networks unleashed aps and zone director+15EPSS score2.27%
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain authenticated Root Command Injection in the CLI that could allow authenticated valid users to execute privileged commands on the respective systems.CVE-2017-6224brocade communications systems, inc.zone director controller and unleashed ap firmware+2EPSS score1.21%
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.CVE-2017-6225broadcomfabric_operating_system+2EPSS score1.43%
Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow remote attackers to execute arbitrary code or access sensitive browser-based information.