title: License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,
description: Brocade Fabric OS (FOS) hardware
platforms running any version of Brocade Fabric OS software, which
supports the license string format; contain cryptographic
issues that could allow for the installation of forged or fraudulent
license keys. This would allow attackers or a malicious party to forge a
counterfeit license key that the Brocade Fabric OS platform would
authenticate and activate as if it were a legitimate license key.
problem types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
affected:
{
defaultStatus: unaffected
product: Brocade Switches
vendor: Brocade
versions:
status: affected, version: All Version
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL