PT-2017-9527 · Brocade · Brocade Network Advisor

Rgod · Published 2017-01-14 · Updated 2018-05-10 · CVE-2016-8206

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brocade Network Advisor versions prior to and including 14.0.2

Description A Directory Traversal issue in the servlet SoftwareImageUpload could allow remote attackers to write to arbitrary files, and consequently delete the files.

Recommendations For versions prior to and including 14.0.2, update to a version later than 14.0.2 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-8206

ZDI-17-051

Affected Products

Brocade Network Advisor

References · 7

• https://osv.dev/vulnerability/CVE-2016-8206 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8206 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-17-051 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us · Note
• http://zerodayinitiative.com/advisories/ZDI-17-051 · Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179 · Note
• http://securityfocus.com/bid/95692 · Note