© 2026 vulntracker.io

CVE-2016-8202

N/A

Published: May 8, 2017 at 06:00 PM UTC

Updated: June 17, 2026 at 12:54 AM UTC

2 products affected across 2 vendorsFabric Operating SystemFabric Operating System

Using Fibre Channel SAN products running Brocade Fabric OS (FOS). by Brocade Communications Systems, Inc.?

Get instant alerts when new vulnerabilities affect Fibre Channel SAN products running Brocade Fabric OS (FOS). - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fabric Operating System · Broadcom

95%

v ≤ 7.4.1c8.0.1

Fabric Operating System · Brocade Communications

60%

v < 7.4.1d

Affected range stops below 7.4.1d, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/98332

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://www.securitytracker.com/id/1038401

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_us

x_refsource_CONFIRM

Source: [email protected]

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208

CVSS

9HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card