#VU107642 Code Injection in Brocade Fabric OS - CVE-2025-1976

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU107642

#VU107642 Code Injection in Brocade Fabric OS - CVE-2025-1976

Published: April 22, 2025


Vulnerability identifier: #VU107642
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber
CVE-ID: CVE-2025-1976
CWE-ID: CWE-94
Exploitation vector: Local access
Exploit availability: The vulnerability is being exploited in the wild
Vulnerable software:
Brocade Fabric OS
Software vendor:
Brocade

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper validation of IP addresses. A local user with admin-level privileges can pass a specially crafted IP address and execute arbitrary code on the system with root privileges.

Note, the vulnerability is being actively exploited in the wild.


Remediation

Install updates from vendor's website.

External links