Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Brocade Fabric OS proxy leak lets attackers see data

CVE-2018-6440 · published 7 years ago
Summary

The proxy service in older versions of Brocade Fabric Operating System can be accessed from anywhere on the network without a login, allowing attackers to read confidential information and potentially crash the system. Upgrade to the latest released versions or apply the vendor’s security patch to close this exposure.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
broadcom fabric_operating_system >= 7.4.2, < 7.4.2d
>= 8.0.2, < 8.0.2f
>= 8.1.2, < 8.1.2f
>= 8.2.0, < 8.2.1
cpe:2.3:o:broadcom:fabric_operating_system:*:*:*:*:*:*:*:*
Original advisory text
A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cau...
A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
9.1 Critical
Exploitation
2% chance of attack within 30 days
Timeline
Published3 Dec 2018
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-6440 · NVD
Track software like this
Free during beta