1. Home
  2. Mapping Frameworks
  3. Known Exploited Vulnerabilities Home
  4. Broadcom Brocade Fabric OS Code Injection Vulnerability

Known Exploited Vulnerabilities CVE-2025-1976

Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.

Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability exploitation_technique T1068 Exploitation for Privilege Escalation
Comments
Brocade Fabric OS versions 9.1.0 through 9.1.1d6 contain an improper IP validation flaw that allows a user with valid administrative access to escalate their privileges further, allowing for root-level code execution.
References
  1. https://1898advisories.burnsmcd.com/critical-vulnerability-in-brocade-fabric-os-cve-2025-1976
CVE-2025-1976 Broadcom Brocade Fabric OS Code Injection Vulnerability primary_impact T1059 Command and Scripting Interpreter
Comments
Brocade Fabric OS versions 9.1.0 through 9.1.1d6 contain an improper IP validation flaw that allows a user with valid administrative access to escalate their privileges further, allowing for root-level code execution.
References
  1. https://1898advisories.burnsmcd.com/critical-vulnerability-in-brocade-fabric-os-cve-2025-1976