TI-2025-06738 Aliases CVE-2025-7397 GHSA-85v8-mqqr-6qh5

CLI history displays inline passwords

LOW 29CWE-312Published 2025-07-17 · Updated 2025-07-18

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Attack requirements: Present
Impact type: Information disclosure
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-312.

Summary

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized access and potential data breaches.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00107 1st percentileScored 2026-11-07

Fix Fixed Brocade ASCG (Broadcom): 3.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Broadcom	Brocade ASCG	before 3.3.0	3.3.0	Patch available	CNA

Brocade ASCG VendorBroadcom Affected before 3.3.0 Fixed in 3.3.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:brocade:ascg::::::::	before 3.3.0	Vulnerable	Brocade

cpe:2.3:a:brocade:ascg:*:*:*:*:*:*:*:* Versions before 3.3.0 Vulnerable ·Brocade

Remediation

Fix · CNA Brocade ASCG (Broadcom) Fixed in 3.3.0

Timeline

2026-10-02 Threatist record created from CVE-2025-7397
2026-10-03 Alias added: GHSA-85v8-mqqr-6qh5

References

Advisory 1

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35949

TI-2026-42442 vCenter directory-traversal vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
TI-2018-01178 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
TI-2025-01721 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 KEVCVSS 4.0HIGH 8.6
TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3

See all 873 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences