Lucene search

K
cve[email protected]CVE-2016-8209
HistoryMay 08, 2017 - 6:29 p.m.

CVE-2016-8209

2017-05-0818:29:00
CWE-754
web.nvd.nist.gov
18
cve-2016-8209
brocade
netiron
management module
denial of service
nvd
vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

Affected configurations

NVD
Node
brocadenetiron_mlx_series_firmwareMatch-
AND
brocadenetiron_mlxe-16Match-
OR
brocadenetiron_mlxe-32Match-
OR
brocadenetiron_mlxe-4Match-
OR
brocadenetiron_mlxe-8Match-
Node
brocadenetiron_cer_series_firmwareMatch-
AND
brocadenetiron_cer_2024c-4x-rtMatch-
OR
brocadenetiron_cer_2024f-4x-rtMatch-
OR
brocadenetiron_cer_2024f-rtMatch-
OR
brocadenetiron_cer_2048fx-rtMatch-
Node
brocadenetiron_ces_series_firmwareMatch-
AND
brocadenetiron_ces_2024c-4xMatch-
OR
brocadenetiron_ces_2024f-4xMatch-
OR
brocadenetiron_ces_2048fxMatch-
Node
brocadenetiron_xmr_series_firmwareMatch-
AND
brocadenetiron_xmr_16000Match-
OR
brocadenetiron_xmr_32000Match-
OR
brocadenetiron_xmr_4000Match-
OR
brocadenetiron_xmr_8000Match-

CNA Affected

[
  {
    "product": "NetIron XMR/MLX and Brocade CES/CER on NetIron",
    "vendor": "Brocade Communications Systems, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "NetIron 05.8.00 and later releases up to and including 06.1.00"
      }
    ]
  }
]

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

Related for CVE-2016-8209