How severe is CVE-2020-15383?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Broadcom Fabric Operating System

CVE-2020-15383

Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic.

EPSS: 0.010 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Broadcom Fabric_operating_system — versions 8.2.1, 8.2.1a, 8.2.1b
N/a Brocade Fabric Os — versions Brocade Fabric OS versions before v9.0.0, v8.2.2d, and v8.2.1e

References

sirt@brocade.com (x_refsource_MISC, Vendor Advisory)
sirt@brocade.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-15383?: CVE-2020-15383 is a high-severity vulnerability in Broadcom Fabric Operating System. CVSS score: 7.5/10. Published 2021-06-09.
How severe is CVE-2020-15383?: High severity. CVSS v3 base score is 7.5 out of 10.