Code Injection in Brocade Fabric OS - CVE-2025-1976
Published: April 22, 2025
Vulnerability identifier: #VU107642
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-1976
CWE-ID: CWE-94
Exploitation vector: Local access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper validation of IP addresses. A local user with admin-level privileges can pass a specially crafted IP address and execute arbitrary code on the system with root privileges.
Note, the vulnerability is being actively exploited in the wild.
Affected software
Brocade Fabric OS
Connectrix (Brocade)
Connectrix (Brocade)
How to mitigate CVE-2025-1976
Install updates from vendor's website.
Brocade Fabric OS - update to 9.1.1d7
Connectrix (Brocade) - update to 9.1.1d7
Connectrix (Brocade) - update to 9.1.1d7