Database/Control plane, storage & DevOps
Brocade Fabric OS (hard-coded credentials): Documented hard-coded credentials in Brocade Fabric OS
Impact
Documented hard-coded credentials in Brocade Fabric OS — the operating system on the Fibre Channel directors and switches that carry NVMe-over-FC and FC-attached storage into AI clusters. Hard-coded credentials on a SAN switch mean anyone who can reach its management interface owns the zoning configuration, and zoning is the only thing keeping one host's initiators from seeing another's LUNs.
Who can reach it
Anyone with network reachability to the FOS management interface. The credentials are public.
What to do
Upgrade Fabric OS to 8.2.1c / 8.1.2h or later — all 8.0.x and 7.x versions are affected with no fixed release, so those switches need replacing or hard isolation. A FOS upgrade is a firmware install plus switch reboot; on a redundant dual-fabric SAN you do one fabric at a time and multipathing covers it. Until then, put FOS management interfaces on an isolated OOB network.
References
Related entries
- etcd: Authentication flaw via the debug functionCVE-2021-28235 · etcdCritical
- Siemens APOGEE PXC / MEC / MBC and TALON TC BACnet and P2 automation controllers: A cluster of critical flawsCVE-2021-31884 · Siemens APOGEE PXC / MEC / MBC and TALON TC BACnet and P2 automation controllersCritical
- Moxa NPort IAW5000A-I/O serial device server: The built-in web server doesn't validate input properly, letting a remoteCVE-2021-32974 · Moxa NPort IAW5000A-I/O serial device serverCritical
- Grafana: Unauthenticated access to snapshots via /api/snapshots/:keyCVE-2021-39226 · GrafanaCritical
- Imagination PowerVR GPU driver - pinned memory lifecycle: An unprivileged app allocates pinned GPU memory, unpins it soCVE-2021-39815 · Imagination PowerVR GPU driver - pinned memory lifecycleCritical
- Broadcom Emulex HBA Manager / OneCommand Manager (Fibre Channel and FC-NVMe HBAs), before 11.4.425.0 and 12.8.542.31CVE-2021-42774 · Broadcom Emulex HBA Manager / OneCommand Manager (Fibre Channel and FC-NVMe HBAs), before 11.4.425.0 and 12.8.542.31Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.