CVE-2017-6227

MEDIUM

Brocade Fabric OS < 7.4.2b, 8.1.2, 8.2.0 - Denial of Service via Crafted IPv6 Router Advertisement Messages

Title source: llm

Description

A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (CPU consumption and device hang) condition by sending crafted Router Advertisement (RA) messages to a targeted system.

References (1)

Core 1

Core References

Various Sources x_refsource_confirm

https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-526

Scores

CVSS v3 6.5

EPSS 0.0008

EPSS Percentile 24.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (8)

broadcom/fabric_operating_system 8.0.0

broadcom/fabric_operating_system 8.0.1

broadcom/fabric_operating_system 8.0.2

broadcom/fabric_operating_system 8.1.0

broadcom/fabric_operating_system 8.1.1

broadcom/fabric_operating_system 8.1.2

broadcom/fabric_operating_system < 7.4.2b

brocade/fabric_os 8.0.2b2

Published Feb 08, 2018

Tracked Since Feb 18, 2026