This vulnerability arises from insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a. Local, non-administrative users can exploit this flaw to interact directly with backend management services, effectively transmitting commands to Fabric OS switches under the SANnav management user's security context. The CVSS 4.0 score is 8.7, indicating high severity, with network attack vector, low attack complexity, and no user interaction required.

An attacker with local access but without administrative privileges can leverage this vulnerability to execute commands on Fabric OS switches with elevated SANnav management user privileges. This could lead to unauthorized management and control of network fabric components.

The vulnerability affects versions prior to 3.0.1a. Although no explicit patch link is provided, the version 3.0.1a implies a fixed release. It is recommended to upgrade to Brocade SANnav version 3.0.1a or later to remediate this issue. No vendor advisory content is provided to indicate alternative mitigations or if the issue is already mitigated.