CVE-2021-27790: broadcom fabric_operating_system Out-of-bounds Write
Vulnerability summary
CVE-2021-27790 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in broadcom fabric_operating_system. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.1% of scored vulnerabilities.
Timeline
- 12-08-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as the root user account.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Broadcom1 product
- fabric_operating_system< 7.4.2h | ≥ 8.0.0, < 8.2.0_cbn4 | ≥ 8.2.1, < 8.2.3 | ≥ 9.0.0, < 9.0.1a
1 vendor · 1 product