CVE-2025-1976KEV · OVERDUECWE-94

Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6

High · published April 24, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.6. It is confirmed in active exploitation. It sits in the 52.3th percentile for exploit probability.

523
days past CISA
deadline
CVSS v4.0
8.6
EPSS
1%
Percentile
52.3
In the wild
Confirmed
What it is

⚡ A crafty local user can execute arbitrary code with full root privileges on Brocade Fabric OS versions 9.1.0 through 9.1.1d6! 🚨 Think of it like a VIP access pass that lets someone backstage at a concert, but instead of just enjoying the show, they take over the entire production. That’s what this vulnerability allows – full control with admin privileges! An attacker with admin access could wreak absolute havoc by executing malicious code, potentially leading to data breaches or system failures. This is not just a minor inconvenience; it could compromise your entire network environment!

Put simply

Think of it like a VIP access pass that lets someone backstage at a concert, but instead of just enjoying the show, they take over the entire production. That’s what this vulnerability allows – full control with admin privileges! This vulnerability exists because local users with admin privileges can execute arbitrary code despite root access being removed in newer versions of Fabric OS. It’s a loophole that allows exploitation of the system’s command execution capabilities.

What to do

An attacker with admin access could wreak absolute havoc by executing malicious code, potentially leading to data breaches or system failures. This is not just a minor inconvenience; it could compromise your entire network environment! To safeguard your systems, patch to the latest version of Fabric OS immediately. Ensure that admin access is strictly limited to trusted personnel and conduct regular audits to monitor for unauthorized activity. You've got this! Following these steps will help secure your environment and keep those hackers at bay! 🛡️

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00690 · 52.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-04-24T02:55Z
KEV added
2025-04-28 · due 2025-05-19
EPSS history
Timeline
  • 28 APR 00:00Z
    Added to CISA KEV — remediate by May 19
    kev
  • 24 APR 02:55Z
    Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
    cvelistv5