PT-2025-26201 · Brocade · Brocade Fabric Os

Published 2025-06-10 · Updated 2026-02-06 · CVE-2025-4661

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 9.1.0 through 9.2.2

Description A path traversal issue could allow a local admin user to gain access to files outside the intended directory, potentially leading to the disclosure of sensitive information. Admin level privilege is required on the switch in order to exploit this issue.

Recommendations For Brocade Fabric OS versions 9.1.0 through 9.2.2, consider restricting access to sensitive files and directories until a patch is available. As a temporary workaround, limit the privileges of local admin users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-08233

CVE-2025-4661

Affected Products

Brocade Fabric Os

References · 8

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35814 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08233 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4661 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4661 · Security Note
• https://t.me/cveNotify/151134 · Telegram Post
• https://t.me/cvenotify/126149 · Telegram Post
• https://twitter.com/CVEnew/status/1935723265462518002 · Twitter Post
• https://t.me/cvetracker/26547 · Telegram Post