Detections
Analytics

Brocade Fabric OS < 9.2.1c2 / 9.2.2 < 9.2.2b Multiple Vulnerabilities

high Nessus Plugin ID 299690

Language:

Synopsis

The remote Brocade FabricOS host is affected by multiple vulnerabilities.

Description

The version of Brocade FabricOS installed on the remote host is prior to 9.2.1c2, or 9.2.2 prior to 9.2.2b. It is, therefore, affected by multiple vulnerabilities:

 - A vulnerability in Brocade Fabric OS could allow an authenticated attacker with admin privileges using the shell commands source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to traverse to different directories. (CVE-2025-58381)

 - A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands as root using supportsave, seccertmgmt, configupload command. (CVE-2025-58382)

 - A vulnerability in Brocade Fabric OS could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands. (CVE-2025-58383)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Brocade FabricOS 9.2.1c2 / 9.2.2b or later.

See Also

http://www.nessus.org/u?3e6ace47

http://www.nessus.org/u?80059f61

http://www.nessus.org/u?f0520b00

Plugin Details

Severity: High

ID: 299690

File Name: brocade_fabricos_CVE-2025-58382.nasl

Version: 1.2

Type: local

Family: Misc.

Published: 2/20/2026

Updated: 2/23/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 8.3

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C

CVSS Score Source: CVE-2025-58383

CVSS v3

Risk Factor: High

Base Score: 7.2

Temporal Score: 6.3

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.5

Threat Score: 5.9

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2025-58382

Vulnerability Information

CPE: cpe:/o:broadcom:fabric_operating_system, cpe:/o:brocade:fabric_os

Required KB Items: installed_sw/Brocade FabricOS

Exploit Ease: No known exploits are available

Patch Publication Date: 1/27/2026

Vulnerability Publication Date: 1/27/2026

Reference Information

CVE: CVE-2025-58381, CVE-2025-58382, CVE-2025-58383