High severity · published May 8, 2017
CVE-2016-8209
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned…
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netiron Cer Series Firmware · Brocade
All versions, or not specified · source: NVD
NC
Netiron Ces Series Firmware · Brocade
All versions, or not specified · source: NVD
NM
Netiron Mlx Series Firmware · Brocade
All versions, or not specified · source: NVD
NX
Netiron Xmr Series Firmware · Brocade
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-8209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-8209
www.securitytracker.com
http://www.securitytracker.com/id/1038402
Vendor Advisory
https://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-315.htm