Brocade Communications Systems, Inc. vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Brocade Communications Systems, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.

6.5CVE-2017-6227broadcomfabric_operating_system+2
EPSS score
0.54%
A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system.8.8CVE-2019-16205broadcombrocade_sannav+1
EPSS score
1.29%
A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal.7.5CVE-2019-16208broadcombrocade_sannav+1
EPSS score
0.40%
Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services (Radius, TACAS, etc.).7.8CVE-2019-16207broadcombrocade_sannav+1
EPSS score
0.25%
Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privileges.5.5CVE-2019-16206broadcombrocade_sannav+1
EPSS score
0.20%
The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which could allow a local authenticated attacker to access sensitive information.7.4CVE-2019-16209broadcombrocade_sannav+1
EPSS score
0.74%
A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against Secure Sockets Layer(SSL)connections.5.5CVE-2019-16210broadcombrocade_sannav+1
EPSS score
0.21%
Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.