Vulnerability in Broadcom Fabric Operating System
CVE-2016-8202
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.
EPSS: 0.031 (86.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Broadcom Fabric_operating_system — versions 8.0.1
- Brocade Communications Systems, Inc. Fibre Channel San Products Running Fabric Os (Fos). — versions Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b
Weakness classification (CWE)
References
- sirt@brocade.com (vdb-entry, x_refsource_SECTRACK)
- sirt@brocade.com (x_refsource_CONFIRM, Third Party Advisory)
- sirt@brocade.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- sirt@brocade.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2016-8202?
- CVE-2016-8202 is a high-severity vulnerability in Broadcom Fabric Operating System, classified under CWE-264. CVSS score: 8.8/10. Published 2017-05-08.
- How severe is CVE-2016-8202?
- High severity. CVSS v3 base score is 8.8 out of 10.