CyberRota Analysis
AI-GeneratedThe Brocade SANnav CLI scripting component is vulnerable due to insufficient input sanitization of shell metacharacters, allowing authenticated users to escape restricted execution contexts on managed switches. This flaw enables attackers with command execution permissions to execute unauthorized shell commands, bypassing security controls and gaining full administrative access to the switches. Organizations using Brocade SANnav versions prior to 3.0.1a should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential network compromise.
Original NVD Description
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell commands across target fabric switches, bypassing command allow-lists and obtaining full administrative switch access. This vulnerability affects all Brocade SANnav versions before 3.0.1a.