CVEvulnerability

CVE-2020-15387

7.4 HIGH Published 2021-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-326

Description

The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.

Affected configurations

• broadcom brocade sannav (< 2.1.1) • broadcom fabric operating system (< 7.4.2) • broadcom fabric operating system (>= 8.2.0 < 8.2.1) • broadcom fabric operating system 7.4.2 • broadcom fabric operating system 7.4.2a • broadcom fabric operating system 7.4.2b • broadcom fabric operating system 7.4.2c • broadcom fabric operating system 7.4.2d • broadcom fabric operating system 7.4.2f • broadcom fabric operating system 7.4.2g • broadcom fabric operating system 8.2.1 • broadcom fabric operating system 8.2.1a • broadcom fabric operating system 8.2.1b

Related

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References