PublicCVE

CVE-2025-1976

HIGH8.6
CISA KEV
JSON exportCreate alert

Description

Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.

CVSS breakdown

CVSS 4.0
Attack Vector
Adjacent
Attack Complexity
Low
Attack Requirements
None
Privileges Required
Low
User Interaction
None
Confidentiality (Vulnerable System)
High
Integrity (Vulnerable System)
High
Availability (Vulnerable System)
High
Confidentiality (Subsequent System)
None
Integrity (Subsequent System)
None
Availability (Subsequent System)
None

Affected products

  • Brocade / Fabric OSFabric OS versions 9.1.0 through 9.1.1d6 – Fabric OS versions 9.1.0 through 9.1.1d6