CVE-2018-6442

A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
brocadeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
broadcomfabric_operating_system
7.4.2 ≤
𝑥
< 7.4.2d
broadcomfabric_operating_system
8.0.2 ≤
𝑥
< 8.0.2f
broadcomfabric_operating_system
8.1.2 ≤
𝑥
< 8.1.2f
broadcomfabric_operating_system
8.2.0 ≤
𝑥
< 8.2.1
𝑥
= Vulnerable software versions
References
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-735
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-735