Brocade vulnerabilities
177 vulnerabilities
Known vulnerabilities in Brocade products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 34 products.
Products
34- Fabric Os73 vulnerabilities
- Brocade Sannav34 vulnerabilities
- Sannav20 vulnerabilities
- Brocade Active Support Connectivity Gateway13 vulnerabilities
- Fabric Operating System9 vulnerabilities
- Brocade Fabric OS8 vulnerabilities
- Network Advisor6 vulnerabilities
- Ascg3 vulnerabilities
- Vyatta 5400 Vrouter3 vulnerabilities
- Vyatta 5400 Vrouter Software3 vulnerabilities
- Active Support Connectivity Gateway1 vulnerabilities
- Adx1 vulnerabilities
- Bigiron Rx1 vulnerabilities
- Brocade Switches1 vulnerabilities
- Fastiron1 vulnerabilities
- Icx1 vulnerabilities
- Mlx1 vulnerabilities
- Netiron Cer1 vulnerabilities
- Netiron Cer Series1 vulnerabilities
- Netiron Ces1 vulnerabilities
- Netiron Ces Series1 vulnerabilities
- Netiron Mlx Series1 vulnerabilities
- Netiron Os1 vulnerabilities
- Netiron Xmr1 vulnerabilities
- Netiron Xmr Series1 vulnerabilities
- Silkworm1 vulnerabilities
- Silkworm Fiber Channel Switch1 vulnerabilities
- Turboiron1 vulnerabilities
- Vdx1 vulnerabilities
- Virtual Traffic Manager1 vulnerabilities
- Vyatta1 vulnerabilities
- Vyatta Vrouter1 vulnerabilities
- Vyatta Vrouter Software1 vulnerabilities
- Bigiron Rx Switch0 vulnerabilities
CVE-2018-6443brocade communications systems, inc.brocade network advisor+2
EPSS score7.40%
A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who has access to Network Advisor client libraries and able to decrypt the Jboss credentials could gain access to the Jboss web console.CVE-2018-6444brocade communications systems, inc.brocade network advisor+2EPSS score3.27%
A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrary OS Commands.CVE-2018-6445brocade communications systems, inc.brocade network advisor+2EPSS score1.67%
A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted (not hashed) password of the systems. The attacker could gain access to the Brocade Network Advisor System after extracting/decrypting the passwords.CVE-2013-7307brocadevyatta_vrouter+1EPSS score0.95%
The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.CVE-2013-7306brocadeadx+10EPSS score0.75%
The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.CVE-2021-27798broadcomfabric_operating_system+1EPSS score0.23%
A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report.CVE-2021-27795brocadebrocade switchesEPSS score0.24%
Brocade Fabric OS (FOS) hardware
platforms running any version of Brocade Fabric OS software, which
supports the license string format; contain cryptographic
issues that could allow for the installation of forged or fraudulent
license keys. This would allow attackers or a malicious party to forge a
counterfeit license key that the Brocade Fabric OS platform would
authenticate and activate as if it were a legitimate license key.CVE-2021-22555broadcomfabric_operating_system+89KEVEPSS score78.68%
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name spaceCVE-2016-8203brocadenetiron_osEPSS score1.84%
A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service (line card reset) via certain constructed IPsec control packets.CVE-2016-8206brocadenetwork_advisorEPSS score14.54%
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.CVE-2016-8201brocadevirtual_traffic_managerEPSS score0.47%
A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster.CVE-2016-8207brocadenetwork_advisorEPSS score15.38%
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.CVE-2016-8209brocade communications systems, inc.netiron xmr/mlx and brocade ces/cer on netiron+4EPSS score1.07%
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.CVE-2016-8205brocadenetwork_advisorEPSS score13.03%
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.CVE-2025-1976broadcomfabric_operating_system+1KEVEPSS score0.69%
Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.CVE-2025-1053broadcombrocade_sannav+1EPSS score0.16%
Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave. An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.CVE-2025-9711broadcomfabric_operating_system+1EPSS score0.14%
A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryptocfg commands.CVE-2025-4661broadcomfabric_operating_system+1EPSS score0.21%
A path transversal vulnerability in
Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to
gain access to files outside the intended directory potentially leading
to the disclosure of sensitive information.
Note: Admin level privilege is required on the switch in order to exploitCVE-2025-7397broadcombrocade ascg+1EPSS score0.11%
A vulnerability in the ascgshell, of
Brocade ASCG before 3.3.0 stores any command executed in the Command
Line Interface (CLI) in plain text within the command history. A local
authenticated user that can access sensitive information like passwords
within the CLI history leading to unauthorized access and potential data
breaches.CVE-2025-58382broadcomfabric_operating_system+1EPSS score0.65%
A vulnerability in the secure configuration of authentication and
management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could
allow an authenticated, remote attacker with administrative credentials
to execute arbitrary commands as root using “supportsave”,
“seccertmgmt”, “configupload” command.