Vulnerabilities > Broadcom > Fabric Operating System > High

DATE CVE VULNERABILITY TITLE RISK
2018-11-08 CVE-2018-6442 Unspecified vulnerability in Broadcom Fabric Operating System
A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.
network
low complexity
broadcom
8.8
2018-11-08 CVE-2018-6441 Unspecified vulnerability in Broadcom Fabric Operating System
A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell.
local
low complexity
broadcom
7.8
2018-11-08 CVE-2018-6435 Unspecified vulnerability in Broadcom Fabric Operating System
A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access.
local
low complexity
broadcom
7.8
2018-11-08 CVE-2018-6434 Session Fixation vulnerability in Broadcom Fabric Operating System
A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID.
network
low complexity
broadcom CWE-384
7.5
2017-05-08 CVE-2016-8202 Permissions, Privileges, and Access Controls vulnerability in Broadcom Fabric Operating System
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface.
network
low complexity
broadcom CWE-264
8.8