CVE-2020-15372

MEDIUM

Brocade Fabric OS <v8.2.2a1-9.0.0 - Privilege Escalation

Title source: llm

Description

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging.

References (1)

[Vendor Advisory] https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1081

Scores

CVSS v3 5.5

EPSS 0.0007

EPSS Percentile 21.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-913

Status published

Products (1)

broadcom/fabric_operating_system < 7.4.2g

Published Sep 25, 2020

Tracked Since Feb 18, 2026