CVE-2016-8202

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-08 · updated 2026-06-17
Weakness: CWE-264

Description

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.

Affected products

Brocade Fabric OS: through 7.4.1c; 8.0.1

References

http://www.securityfocus.com/bid/98332
http://www.securitytracker.com/id/1038401
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_us
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208
http://www.securityfocus.com/bid/98332
http://www.securitytracker.com/id/1038401
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_us
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208

Get alerted when CVE-2016-8202 or the next vulnerability affects your stack