Actively exploited in the wild
Broadcom Brocade Fabric OS Code Injection Vulnerability
Broadcom - Brocade Fabric OS · Listed in the CISA KEV since 2025-04-28. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-1976
MediumCVSS 6.7KEVSummary
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
Risk Assessment
A local administrator can gain full root privileges, allowing complete takeover of the device and bypassing the intended privilege model.
Recommendation
Upgrade Brocade Fabric OS to a version later than 9.1.1d6 and restrict administrative access to trusted personnel.
Other vulnerabilities in Brocade Fabric OS
See all- CVE-2023-4163Medium
In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command.
- CVE-2023-4162Medium
A segmentation fault can occur in Brocade Fabric OS after version 9.0 and before version 9.2.0a through the passwdcfg command. This allows an authenticated privileged local user to crash a Brocade Fabric OS switch.
- CVE-2023-3489High
The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade to any earlier version of Fabric OS.
Original NVD description (English source)
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.