CVE-2020-15387
Summary
| CVE | CVE-2020-15387 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-06-09 16:15:00 UTC |
| Updated | 2021-08-23 14:47:00 UTC |
| Description | The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications. |
Risk And Classification
Problem Types: CWE-326
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Broadcom | Brocade Sannav | All | All | All | All |
| Operating System | Broadcom | Fabric Operating System | All | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | - | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | a | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | b | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | c | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | d | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | f | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2 | g | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2a | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2b | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2c | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2d | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2f | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 7.4.2g | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1 | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1 | - | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1 | a | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1 | b | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1a | All | All | All |
| Operating System | Broadcom | Fabric Operating System | 8.2.1b | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Broadcom Inc. | Connecting Everything | MISC | www.broadcom.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.