Vulnerability · Published Jul 8, 2025 · Assigned by brocade

CVE-2025-4663Denial-of-Service (DoS) after Unusual or Exceptional Conditions vulnerability

Medium 6.8

In plain English

A medium-severity security flaw in Brocade Fabric OS from Broadcom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).

Severity (CVSS 4.0)6.8Medium
Exploit odds (30 days)0.4%top 70.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow an authenticated, network-based attacker to cause a Denial-of-Service (DoS). The vulnerability is encountered when supportsave is invoked remotely, using ssh command or SANnav inline ssh, and the corresponding ssh session is terminated with Control C (^c ) before supportsave completion. This issue affects Brocade Fabric OS 9.0.0 through 9.2.2

Affected products (as reported)

VendorProductVersions
Broadcom Brocade Fabric OS Brocade Fabric OS 9.0.0 through 9.2.2

Weakness: CWE-754 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References