The server in Brocade Network Advisor before 12.1.0 as used in EMC Connectrix Manager Converged Network Edition (CMCNE) HP B-series SAN Network Advisor and possibly other products allows remote attackers to execute arbitrary code by using a servlet to upload an executable file.