Security Bulletin: IBM b-type SAN directors and switches is affected by privilege escalation vulnerability (CVE-2016-8202).

Summary

IBM b-type SAN directors and switches has addressed the privilege escalation vulnerability (CVE-2016-8202).

Vulnerability Details

CVEID:CVE-2016-8202**
DESCRIPTION: *Brocade Fabric OS could allow a remote authenticated attacker to gain elevated privileges on the system. By sending specially-crafted commands and parameters on the command line interface, an attacker could exploit this vulnerability to gain privileges on the system.
CVSS Base Score: 8.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/125666 for the current score
CVSS Environmental Score: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Affected IBM b-type Directors and switches

|

Affected Versions

—|—
FOS| FOS 7.X versions Prior to 7.4.1d
FOS| FOS 8.X versions Prior to 8.0.1b

Remediation/Fixes

Product

|

VRMF

|

Remediation / First Fix

—|—|—
FOS| 7.4.1d| <http://www-01.ibm.com/support/docview.wss?uid=ssg1S1003855&gt;
FOS| 8.0.1b| <http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009577&gt;

Workarounds and Mitigations

NA