The vulnerability of the DashboardFileReceiveServlet in the network management system by Brocade Network Advisor allows a attacker to upload a malicious file into the file system, where it can be executed.

🗓️ 21 Dec 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

DashboardFileReceiveServlet vulnerability enables upload of malicious files to system where they run.

Reporter	Title	Published	Views	Family All 13
IBM Security Bulletins	Security Bulletin: Directory Traversal vulnerabilities impact IBM Network Advisor.	18 Jun 201800:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Brocade Network Advisor affect IBM PureApplication System.	15 Jun 201807:07	–	ibm
Broadcom	BSA-2017-178	6 Jan 201700:00	–	broadcom
CNVD	Brocade Network Advisor Directory Traversal Vulnerability (CNVD-2017-00701)	16 Jan 201700:00	–	cnvd
Check Point Advisories	Brocade Network Advisor DashboardFileReceiveServlet filename Directory Traversal (CVE-2016-8205)	27 Feb 201700:00	–	checkpoint_advisories
CVE	CVE-2016-8205	14 Jan 201719:00	–	cve
Cvelist	CVE-2016-8205	14 Jan 201719:00	–	cvelist
HPE Security Bulletins	HPESBHF03785 rev.1 - HPE B-Series SAN Network Advisor Software, Multiple Remote Vulnerabilities	17 Oct 201700:00	–	hpe
NVD	CVE-2016-8205	14 Jan 201719:59	–	nvd
OpenVAS	Brocade Network Advisor Multiple Vulnerabilities	16 Jan 201700:00	–	openvas

Vulners

Node

broadcom san_network_advisorRange≤14.0.2

Source	Link
brocade	www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-178.htm
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 39.8

CVSS 210

EPSS0.13033

DashboardFileReceiveServlet Brocade Network Advisor file upload vulnerability file system execution path name limitation access control weakness malicious file download