7.5high
CVE-2016-8209
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the M…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 65%
Public exploits
0
none known
Summary
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.
Exploit prediction (EPSS)
1.06% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- Brocade Communications Systems, Inc. NetIron XMR/MLX and Brocade CES/CER on NetIron
Classification
- Weakness
- CWE-754 Improper Check for Unusual or Exceptional Conditions
References
- securitytracker.com /id/1038402 · vdb-entry, x_refsource_SECTRACK, x_transferred
- brocade.com /content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-20 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-8209
- NVD: CVE-2016-8209
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.