CVE-2016-8209

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-8209
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://www.securitytracker.com/id/1038402
https://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-315.htm Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:brocade:netiron_mlx_series_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:brocade:netiron_mlxe-16:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_mlxe-32:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_mlxe-4:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_mlxe-8:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:brocade:netiron_cer_series_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:brocade:netiron_cer_2024c-4x-rt:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_cer_2024f-4x-rt:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_cer_2024f-rt:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_cer_2048fx-rt:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:brocade:netiron_ces_series_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:brocade:netiron_ces_2024c-4x:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_ces_2024f-4x:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_ces_2048fx:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:brocade:netiron_xmr_series_firmware:-:*:*:*:*:*:*:*
OR cpe:2.3:h:brocade:netiron_xmr_16000:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_xmr_32000:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_xmr_4000:-:*:*:*:*:*:*:*
cpe:2.3:h:brocade:netiron_xmr_8000:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2017-05-08 18:29

Updated : 2023-12-10 12:01

NVD link : CVE-2016-8209

Mitre link : CVE-2016-8209

CVE.ORG link : CVE-2016-8209

JSON object : View

Products Affected

brocade

  • netiron_ces_2048fx
  • netiron_xmr_series_firmware
  • netiron_ces_2024c-4x
  • netiron_mlxe-16
  • netiron_cer_series_firmware
  • netiron_cer_2024f-rt
  • netiron_mlxe-32
  • netiron_xmr_4000
  • netiron_mlxe-4
  • netiron_cer_2024f-4x-rt
  • netiron_cer_2024c-4x-rt
  • netiron_mlx_series_firmware
  • netiron_xmr_16000
  • netiron_xmr_32000
  • netiron_xmr_8000
  • netiron_ces_2024f-4x
  • netiron_mlxe-8
  • netiron_cer_2048fx-rt
  • netiron_ces_series_firmware
CWE
CWE-754

Improper Check for Unusual or Exceptional Conditions