Detections
Analytics
Brocade Fabric OS < 9.2.1c2 / 9.2.2 < 9.2.2b Multiple Vulnerabilities
high Nessus Plugin ID 299690
Synopsis
The remote Brocade FabricOS host is affected by multiple vulnerabilities.Description
The version of Brocade FabricOS installed on the remote host is prior to 9.2.1c2, or 9.2.2 prior to 9.2.2b. It is, therefore, affected by multiple vulnerabilities:- A vulnerability in Brocade Fabric OS could allow an authenticated attacker with admin privileges using the shell commands source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to traverse to different directories. (CVE-2025-58381)
- A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands as root using supportsave, seccertmgmt, configupload command. (CVE-2025-58382)
- A vulnerability in Brocade Fabric OS could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands. (CVE-2025-58383)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Brocade FabricOS 9.2.1c2 / 9.2.2b or later.See Also
http://www.nessus.org/u?3e6ace47
Plugin Details
Severity: High
ID: 299690
File Name: brocade_fabricos_CVE-2025-58382.nasl
Version: 1.1
Type: local
Family: Misc.
Published: 2/20/2026
Updated: 2/20/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2025-58382
CVSS v3
Risk Factor: High
Base Score: 7.2
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4
Risk Factor: High
Base Score: 8.5
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2025-58382
Vulnerability Information
CPE: cpe:/o:broadcom:fabric_operating_system, cpe:/o:brocade:fabric_os
Required KB Items: installed_sw/Brocade FabricOS
Patch Publication Date: 1/27/2026
Vulnerability Publication Date: 1/27/2026