Broadcom
Broadcom Fabric Operating System: vulnerabilidades y CVE
Broadcom Fabric Operating System tiene 95 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 9 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE95
Últimos 12 meses7
Críticas9
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-1976 | Alta (8.6) | 0.69% | ⚠ Explotación activa | 24 abr 2025 | Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-9711 | Alta (8.5) | 0.13% | — | 3 feb 2026 | A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands. |
| CVE-2025-58381 | Media (4.6) | 0.19% | — | 3 feb 2026 | A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards… |
| CVE-2025-58380 | Media (4.6) | 0.19% | — | 3 feb 2026 | A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the path variables and move upwards in the directory structure or to… |
| CVE-2026-0383 | Alta (8.2) | 0.21% | — | 3 feb 2026 | A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command. |
| CVE-2025-58383 | Alta (8.4) | 0.51% | — | 3 feb 2026 | A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary… |
| CVE-2025-58382 | Alta (8.5) | 0.60% | — | 3 feb 2026 | A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an authenticated, remote attacker with administrative credentials to… |
| CVE-2025-58379 | Media (6) | 0.15% | — | 3 feb 2026 | Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege sensitive information by a lower… |
| CVE-2025-4663 | Media (6.8) | 0.33% | — | 8 jul 2025 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow an authenticated, network-based attacker to cause a Denial-of-Service (DoS). The vulnerability is… |
| CVE-2025-4661 | Media (4.8) | 0.21% | — | 19 jun 2025 | A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive… |
| CVE-2025-1976 | Alta (8.6) | 0.69% | ⚠ Explotación activa | 24 abr 2025 | Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through… |
| CVE-2024-5462 | Media (5.3) | 0.16% | — | 15 feb 2025 | If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP privsecret / authsecret fields can be exposed in plaintext. The plaintext passwords can be exposed… |
| CVE-2024-5461 | Alta (8.6) | 0.45% | — | 15 feb 2025 | Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated… |
| CVE-2024-7517 | Alta (8.5) | 0.62% | — | 21 nov 2024 | A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of… |
| CVE-2024-10403 | Media (5.9) | 0.65% | — | 21 nov 2024 | Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav or through WebEM in… |
| CVE-2024-7516 | Alta (7) | 0.25% | — | 12 nov 2024 | A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacking that may arise from the attacker's ability to forge an SSH key while the… |
| CVE-2024-3596 | Crítica (9) | 15% | — | 9 jul 2024 | RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix… |
| CVE-2024-5460 | Alta (8.1) | 0.54% | — | 26 jun 2024 | A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an… |
| CVE-2024-29954 | Media (5.5) | 0.11% | — | 26 jun 2024 | A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the… |
| CVE-2024-29953 | Media (4.3) | 0.30% | — | 26 jun 2024 | A vulnerability in the web interface in Brocade Fabric OS before v9.2.1, v9.2.0b, and v9.1.1d prints encoded session passwords on session storage for Virtual Fabric platforms. This could allow an authenticated user to… |
| CVE-2023-5973 | Media (4.3) | 0.18% | — | 5 abr 2024 | Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI… |
| CVE-2024-24795 | Media (6.3) | 2.9% | — | 4 abr 2024 | HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended… |
| CVE-2023-38709 | Alta (7.3) | 3.9% | — | 4 abr 2024 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58. |
| CVE-2023-3454 | Crítica (9.8) | 1.2% | — | 4 abr 2024 | Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary code and use this to gain root access to the Brocade switch. |
| CVE-2021-27795 | Alta (8.1) | 0.24% | — | 6 dic 2023 | Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or… |
| CVE-2023-4163 | Media (4.4) | 0.27% | — | 31 ago 2023 | In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command. |
| CVE-2023-4162 | Media (4.4) | 0.17% | — | 31 ago 2023 | A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash… |
| CVE-2023-3489 | Alta (7.5) | 0.36% | — | 31 ago 2023 | The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of… |
| CVE-2023-31427 | Alta (7.8) | 0.21% | — | 1 ago 2023 | Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned… |
| CVE-2023-31426 | Media (6.5) | 0.66% | — | 1 ago 2023 | The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated… |
| CVE-2023-31429 | Media (5.5) | 0.22% | — | 1 ago 2023 | Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold,… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Broadcom
Brocade Sannav · 54Tcpreplay · 52Brightstor Arcserve Backup · 41Brocade Fabric Operating System Firmware · 26Rabbitmq Server · 25Raid Controller WEB Interface · 22Sannav · 20Brightstor Enterprise Backup · 19Advanced Secure Gateway · 16Business Protection Suite · 16Etrust Antivirus · 16Etrust Intrusion Detection · 16