PT-2025-29980 · Brocade · Brocade Ascg

Published 2025-07-17 · Updated 2026-02-02 · CVE-2025-7397

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0

Description A vulnerability exists in the ascgshell component of Brocade ASCG. The software stores commands executed in the Command Line Interface (CLI) in plain text within the command history. A locally authenticated user with access to sensitive information within the CLI history may gain unauthorized access and potentially cause data breaches.

Recommendations Update Brocade ASCG to version 3.3.0 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-7397

Affected Products

Brocade Ascg

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-7397 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35949 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-7397 · Vendor Advisory
• https://t.me/cveNotify/150561 · Telegram Post
• https://t.me/cvetracker/28084 · Telegram Post
• https://twitter.com/CVEnew/status/1945970853868453942 · Twitter Post
• https://t.me/cvenotify/129791 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1946062989116772536 · Twitter Post
• https://t.me/cveNotify/129791 · Telegram Post