Is CVE-2016-8204 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2016-8204 being exploited in the wild.

How severe is CVE-2016-8204?

Critical severity, with a CVSS score of 9.8, published 14 January 2017.

Which products and versions are affected?

Brocade Network Advisor Versions up to and including 14.0.2.

Is there a fix for CVE-2016-8204?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2016-8204 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2016-8204?

Check whether you run Broadcom Brocade Network Advisor or Brocade Network Advisor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2016-8204: Brocade Network Advisor directory traversal in FileReceiveServlet

CVE-2016-8204 · Severity: critical · CVSS 9.8 · Published 2017-01-14

Brocade Network Advisor is a management platform used to monitor and configure storage area networks (SANs). A critical security flaw allows an unauthenticated attacker to remotely upload malicious files to the server. This could lead to a complete takeover of the management system, potentially disrupting network operations or allowing unauthorized access to sensitive infrastructure configurations.

Technologies: Brocade Network Advisor. Vendors: Broadcom, Brocade.

Quick answers

Is CVE-2016-8204 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2016-8204 being exploited in the wild.
How severe is CVE-2016-8204?: Critical severity, with a CVSS score of 9.8, published 14 January 2017.
Which products and versions are affected?: Brocade Network Advisor Versions up to and including 14.0.2.
Is there a fix for CVE-2016-8204?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2016-8204 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2016-8204?: Check whether you run Broadcom Brocade Network Advisor or Brocade Network Advisor at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A directory traversal vulnerability exists in the FileReceiveServlet component of Brocade Network Advisor due to insufficient validation of user-supplied paths during file upload operations. An unauthenticated remote attacker can exploit this by sending a specially crafted request to upload a malicious file (such as a web shell) into a directory where it can be executed. Successful exploitation allows for arbitrary code execution with SYSTEM privileges. The vulnerability is fixed in Brocade Network Advisor versions 14.0.3, 14.1.1, and later.

Affected products

Brocade Network Advisor Versions up to and including 14.0.2

Timeline

2016-10-17: disclosed: Vulnerability reported to vendor via ZDI
2017-01-06: advisory: Initial vendor advisory published by Brocade
2017-01-14: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.