CVE-2025-7397 MEDIUM

CVE-2025-7397: CLI history displays inline passwords

Vendor Broadcom
Product Brocade ASCG
Weakness CWE-312 · Cleartext storage
Published July 17, 2025
Last update July 18, 2025
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:H/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface (CLI) in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized access and potential data breaches.

Key dates

02Disclosure timeline

July 17, 2025 CVE published
July 18, 2025 Record updated