How severe is CVE-2021-27796?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Broadcom Fabric Operating System

CVE-2021-27796

A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries.

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Broadcom Fabric_operating_system
N/a Brocade Fabric Os — versions Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d

References

sirt@brocade.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-27796?: CVE-2021-27796 is a medium-severity vulnerability in Broadcom Fabric Operating System. CVSS score: 6.5/10. Published 2022-02-21.
How severe is CVE-2021-27796?: Medium severity. CVSS v3 base score is 6.5 out of 10.