PT-2025-17487 · Brocade · Brocade Fabric Os

Published 2025-04-17 · Updated 2025-06-03 · CVE-2025-1976

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 9.1.0 through 9.1.1d6

Description The issue allows a local user with admin privilege to potentially execute arbitrary code with full root privileges. This is a critical vulnerability that has been actively exploited. A local admin user can gain root access via code injection. The estimated number of potentially affected devices is not specified.

Recommendations For Brocade Fabric OS versions 9.1.0 through 9.1.1d6, patch immediately to prevent code injection and limit SAN management access to minimize the risk of exploitation. As a temporary workaround, consider restricting access to sensitive areas of the system until a patch is available.

Fix

LPE

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

BDU:2025-04740

CVE-2025-1976

Affected Products

Brocade Fabric Os

References · 43

• https://nvd.nist.gov/vuln/detail/CVE-2025-1976 · Security Note
• https://bdu.fstec.ru/vul/2025-04740 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1976 · Vendor Advisory
• https://reddit.com/r/CVEWatch/comments/1kakbfz/top_10_trending_cves_29042025 · Reddit Post
• https://twitter.com/CipherN0/status/1917649876722049151 · Twitter Post
• https://t.me/csirt_italia/2397 · Telegram Post
• https://twitter.com/dCypherIO/status/1917247512467132486 · Twitter Post
• https://twitter.com/router_bugs/status/1919799404615041470 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1976 · Note
• https://t.me/latest_high_impact_cve/2191 · Telegram Post
• https://twitter.com/_F2po_/status/1917075310928957620 · Twitter Post
• https://twitter.com/freedomhack101/status/1917550360320750069 · Twitter Post
• https://twitter.com/syedaquib77/status/1917294719505252528 · Twitter Post
• https://twitter.com/fletch_ai/status/1917474050923979158 · Twitter Post
• https://twitter.com/CyberWolfGuard/status/1917090980747936142 · Twitter Post