Brocade Fabric OS 9.1.x < 9.1.1d7 RCE (BSA-2025-2930)

#%NASL_MIN_LEVEL 80900
#
# (C) Tenable, Inc.
#

include('compat.inc');

if (description)
{
  script_id(240848);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/06/28");

  script_cve_id("CVE-2025-1976");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/05/19");

  script_name(english:"Brocade Fabric OS 9.1.x < 9.1.1d7 RCE (BSA-2025-2930)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Brocade FabricOS host is affected by a remote code execution vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Brocade FabricOS installed on the remote host is 9.1.x prior to 9.1.1d7. It is, therefore, affected by a
remote code execution vulnerability as referenced in the BSA-2025-2930 advisory:

  - Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin
    privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 
    through 9.1.1d6.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25602
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?59b79766");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Brocade FabricOS 9.1.1d7 or later");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:M/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:A");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-1976");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/04/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/04/03");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/06/27");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:brocade:fabric_os");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:broadcom:fabric_operating_system");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("brocade_fabricos_detect.nbin");
  script_require_keys("installed_sw/Brocade FabricOS");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Brocade FabricOS', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [{'min_version': '9.1.0', 'fixed_version' : '9.1.1d7'}]
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:result);