CVE-2016-8202

A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters.

• CWE-264

• http://www.securityfocus.com/bid/98332Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038401
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_usThird Party Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208
• http://www.securityfocus.com/bid/98332Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038401
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_usThird Party Advisory
• https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208

Published

May 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8196Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8197Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8198Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8199Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8200Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8201A CSRF vulnerability in Brocade Virtual Traffic Manager vers…
• CVE-2016-8203A memory corruption in the IPsec code path of Brocade NetIro…
• CVE-2016-8204A Directory Traversal vulnerability in FileReceiveServlet in…9.8
• CVE-2016-8205A Directory Traversal vulnerability in DashboardFileReceiveS…
• CVE-2016-8206A Directory Traversal vulnerability in servlet SoftwareImage…
• CVE-2016-8207A Directory Traversal vulnerability in CliMonitorReportServl…
• CVE-2016-8209Improper checks for unusual or exceptional conditions in Bro…