Skip to content
OpenAdvisories
Medium WID-SEC-2026-0245 6 CVEs

Broadcom Fabric OS: Mehrere Schwachstellen

Published Jan 27, 2026 · Updated Feb 3, 2026 · Revision 2 · de-DE

Vendor: Broadcom Product: Fabric OS

Summary

Ein Angreifer kann mehrere Schwachstellen in Broadcom Fabric OS ausnutzen, um Berechtigungen zu erweitern, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Fabric OS (FOS) ist ein Betriebssystem für FibreChannel Switches.

Vulnerabilities 6

  • High 8.5
    CVE-2025-9711

    Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b

    A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.

    Brocade Fabric OS
  • High 8.4
    CVE-2025-58383

    Privilege escalation via bind command in Brocade Fabric OS

    A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands.

    Brocade Fabric OS
  • High 8.2
    CVE-2026-0383

    Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0

    A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command.

    Brocade Fabric OS
  • Medium 6.0
    CVE-2025-58379

    Password Exposure in Brocade Fabric OS

    Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege sensitive information by a lower privileged user.

    Brocade Fabric OS
  • Medium 4.6
    CVE-2025-58380

    Directory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command

    A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the path variables and move upwards in the directory structure or to traverse to different directories.

    Brocade Fabric OS
  • Medium 4.6
    CVE-2025-58381

    Directory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands

    A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to travers…

    Brocade Fabric OS

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-5262, EUVD-2025-206741, EUVD-2025-206763, EUVD-2025-206764, EUVD-2025-206771

  2. #1

    Initiale Fassung

References