VulnerabilityModified
CVE-2016-8206
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
HIGH 7.5EPSS 14.5%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 14.54% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- brocade/network advisor
- Source
- sirt@brocade.com
References
- http://www.securityfocus.com/bid/95692Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-051
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179
- http://www.securityfocus.com/bid/95692Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-17-051
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
- https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.