How to fix CVE-2025-58383?

Within 24 hours: Inventory all Fabric OS deployments and identify systems running versions 9.2.1 or earlier; isolate or restrict network access to affected systems if possible. Within 7 days: Contact vendor for available workarounds or interim patches; implement compensating controls such as enhanced access controls and logging; escalate to vendor for expedited patch timeline. Within 30 days: Deploy patches immediately upon availability; verify remediation through vulnerability scanning; conduct access log review for signs of exploitation.

Is Dns affected by CVE-2025-58383?

Fabric Operating System versions through 9.2.1 contain a privilege escalation vulnerability that could allow attackers to execute code with elevated permissions, potentially compromising network infrastructure and data integrity.

CVE-2025-58383

HIGH

2026-02-03 [email protected]

7.2

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 02:16 nvd

HIGH 7.2

Description

A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands.

Analysis

Fabric Operating System versions up to 9.2.1 is affected by execution with unnecessary privileges (CVSS 7.2).

Technical Context

This vulnerability (CWE-250: Execution with Unnecessary Privileges) affects Fabric Operating System. in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controls allowing the execution of arbitrary commands.

Affected Products

Vendor: Broadcom. Product: Fabric Operating System. Versions: up to 9.2.1.

Remediation

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +36

POC: 0

CVE-2025-58383 vulnerability details – vuln.today

Back

CVE-2025-58383

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2025-58383

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code