Skip to content
Sign in
8.5 High

CVE-2024-7517 A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms…

Description

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extension platforms: Brocade 7810, Brocade 7840, Brocade 7850 and on Brocade X6 or X7 directors with an SX-6 Extension blade installed. The attacker must be logged into the switch via SSH or serial console to conduct the attack.

Affected products and versions

Product Affected versions Fixed in
Fabric OS Versions not published
fabric_os 9.2 earliest → < 9.2.1a 9.2.0c

Other CVEs of Fabric OS

The 71 CVEs of Fabric OS →
CVE-2026-94585 An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before… 7.7 High CVE-2026-94587 A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or… 6.9 Medium CVE-2026-94579 An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines… 5.4 Medium CVE-2026-94576 An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade… 5.9 Medium
Track this CVE