What is CVE-2021-27798?

CVE-2021-27798 is a medium-severity vulnerability in Broadcom Fabric Operating System, classified under Path Traversal. CVSS score: 5.5/10. Published 2022-08-05.

How severe is CVE-2021-27798?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Path Traversal in Broadcom Fabric Operating System

CVE-2021-27798

A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.002 (13.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Broadcom Fabric_operating_system — versions 7.3.1d, 7.4.1b
Brocade Fabric Os — versions Brocade Fabric OS 7.4.1b, and 7.3.1d.

Weakness classification (CWE)

CWE-22 — Path Traversal

References

sirt@brocade.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-27798?: CVE-2021-27798 is a medium-severity vulnerability in Broadcom Fabric Operating System, classified under Path Traversal. CVSS score: 5.5/10. Published 2022-08-05.
How severe is CVE-2021-27798?: Medium severity. CVSS v3 base score is 5.5 out of 10.