CVEvulnerability
CVE-2020-15383
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic.
Affected configurations
• broadcom fabric operating system (< 8.2.1)
• broadcom fabric operating system 8.2.1
• broadcom fabric operating system 8.2.1a
• broadcom fabric operating system 8.2.1b
• broadcom fabric operating system 8.2.1c
• broadcom fabric operating system 8.2.1d
• broadcom fabric operating system 8.2.2a1
• broadcom fabric operating system 8.2.2b
• broadcom fabric operating system 8.2.2c
References
- https://security.netapp.com/advisory/ntap-20210819-0002/ Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1496 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20210819-0002/ Third Party Advisory
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1496 Vendor Advisory