CVE-2021-27794

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.0.1a Brocade Fabric OS versions prior to 8.2.3a Brocade Fabric OS versions prior to 7.4.2h

Description A vulnerability in the authentication mechanism of Brocade Fabric OS could allow a user to login with an empty password or an invalid password through telnet, ssh, and REST. This issue is related to weaknesses in the authentication procedure, which can be exploited by an attacker to gain access to the system.

Recommendations For versions prior to 9.0.1a, update to version 9.0.1a or later to resolve the issue. For versions prior to 8.2.3a, update to version 8.2.3a or later to resolve the issue. For versions prior to 7.4.2h, update to version 7.4.2h or later to resolve the issue. As a temporary workaround, consider restricting access to telnet, ssh, and REST until a patch is available.