PT-2017-9529 · Brocade · Brocade Netiron

Published 2017-05-08 · Updated 2017-07-08 · CVE-2016-8209

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Brocade NetIron versions 05.8.00 through 06.1.00

Description The issue arises from improper checks for unusual or exceptional conditions. When the Management Module is continuously scanned on port 22, it may allow attackers to cause a denial of service, resulting in the crash and reload of the management module.

Recommendations For Brocade NetIron versions 05.8.00 through 06.1.00, consider restricting access to port 22 to minimize the risk of exploitation. As a temporary workaround, limit the scanning of the Management Module on port 22 until a fix is available.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2016-8209

Affected Products

Brocade Netiron

References · 3

• https://brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-315.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8209 · Security Note
• http://securitytracker.com/id/1038402 · Note