Database/Control plane, storage & DevOps
Brocade Fabric OS (hard-coded credentials): Documented hard-coded credentials in Brocade Fabric OS
Impact
Documented hard-coded credentials in Brocade Fabric OS — the operating system on the Fibre Channel directors and switches that carry NVMe-over-FC and FC-attached storage into AI clusters. Hard-coded credentials on a SAN switch mean anyone who can reach its management interface owns the zoning configuration, and zoning is the only thing keeping one host's initiators from seeing another's LUNs.
Who can reach it
Anyone with network reachability to the FOS management interface. The credentials are public.
What to do
Upgrade Fabric OS to 8.2.1c / 8.1.2h or later — all 8.0.x and 7.x versions are affected with no fixed release, so those switches need replacing or hard isolation. A FOS upgrade is a firmware install plus switch reboot; on a redundant dual-fabric SAN you do one fabric at a time and multipathing covers it. Until then, put FOS management interfaces on an isolated OOB network.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.