CVE-2021-27794: Broadcom Fabric Operating System

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST.

Affected products

• Broadcom Fabric Operating System: before 7.4.2h (fixed in 7.4.2h); from 8.0.0, before 8.2.3a (fixed in 8.2.3a); from 9.0.0, before 9.0.1a (fixed in 9.0.1a)

Published 2021-08-12. Last modified 2026-06-17.