EXPOSURES › CVE-2025-1976

CVE-2025-1976

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-04-28 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-1976 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

A Broadcom Brocade Fabric OS vulnerability allows local admins to execute arbitrary code with root privileges, and is currently being exploited in the wild.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Broadcom · vendor Brocade Fabric OS · product

DESCRIPTION

Broadcom Brocade Fabric OS contains a code injection vulnerability that allows a local user with administrative privileges to execute arbitrary code with full root privileges.

AFFECTED FEDRAMP PRODUCTS · 4

PRODUCT	PROVIDER	STATUS	MATCH
Clarity Broadcom	Broadcom	Authorized	vendor-exact · 0.90
General Support Systems (GSS) Broadcom	Broadcom	Authorized	vendor-exact · 0.90
Rally Broadcom	Broadcom	Authorized	vendor-exact · 0.90
Symantec Gov Cloud Security (GCS) Broadcom	Broadcom	In Process	vendor-exact · 0.90