Brocade Communications Systems, Inc.

27 CVEs across 9 Brocade Communications Systems, Inc. products. Browse Brocade Communications Systems, Inc. vulnerabilities, severities, and proof-of-concept exploits.

Brocade Communications Systems, Inc. products with known CVEs

ProductCVEs
Brocade Fabric OS12
Brocade Sannav6
Brocade Network Advisor3
Fibre Channel San Products Running Brocade Fabric OS (Fos).1
Netiron Xmr/mlx And Brocade Ces/cer On Netiron1
Ruckus Networks Solo Aps And Sz Managed Aps1
Ruckus Networks Unleashed Aps And Zone Director1
Zone Director Controller And Unleashed Ap Firmware1
Zone Director Controller Firmware1
Brocade Communications Systems, Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-16210Medium5.52019-11-08Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save.
CVE-2019-16209High7.42019-11-08A vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could allow an attacker to perform a man-in-the-middle attack against…
CVE-2019-16208High7.52019-11-08Password-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker t…
CVE-2019-16207High7.82019-11-08Brocade SANnav versions before v2.0 use a hard-coded password, which could allow local authenticated attackers to access a back-end database and gain privilege…
CVE-2019-16206Medium5.52019-11-08The authentication mechanism, in Brocade SANnav versions before v2.0, logs plaintext account credentials at the ‘trace’ and the 'debug' logging level; which co…
CVE-2019-16205High8.82019-11-08A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insuffi…
CVE-2018-6445High7.52019-01-22A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which inclu…
CVE-2018-6444Critical9.82019-01-22A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability cou…
CVE-2018-6443High8.12019-01-22A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interfa…
CVE-2018-6440Critical9.12018-12-03A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain…
CVE-2018-6439High7.82018-12-03A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a loc…
CVE-2018-6438High7.82018-11-08A Vulnerability in the supportsave command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local…
CVE-2018-6437High7.82018-11-08A Vulnerability in the help command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacke…
CVE-2018-6436High7.82018-11-08A Vulnerability in the firmwaredownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a l…
CVE-2018-6442High8.82018-11-08A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated atta…
CVE-2018-6441High7.82018-11-08A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbit…
CVE-2018-6435High7.82018-11-08A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local…
CVE-2018-6434High7.52018-11-08A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipu…
CVE-2018-6433Medium5.52018-11-08A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the…
CVE-2017-6230High8.82018-02-14Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Comm…
CVE-2017-6229High8.82018-02-14Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13…
CVE-2017-6227Medium6.52018-02-08A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an…
CVE-2017-6225Medium6.12018-02-08Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions b…
CVE-2017-6224High8.82017-10-13Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP F…
CVE-2017-6223High8.82017-10-13Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in…
CVE-2016-8209High7.52017-05-08Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is…
CVE-2016-8202High8.82017-05-08A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allo…