CVE-2025-69271
HighSummary
Broadcom DX NetOps Spectrum versions 24.3.13 and earlier contain a vulnerability due to insufficiently protected credentials, allowing sniffing attacks on Windows and Linux systems.
Risk Assessment
An attacker could intercept credentials transmitted over the network, potentially leading to unauthorized system access and data confidentiality breach.
Recommendation
Upgrade DX NetOps Spectrum to a version later than 24.3.13 and enforce encryption (e.g., TLS) for credential transmission.
Other vulnerabilities in Broadcom DX NetOps Spectrum
See all- CVE-2025-69274High
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69273High
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69272High
CVE-2025-69272 is a vulnerability in Broadcom DX NetOps Spectrum that allows sniffing attacks due to cleartext transmission of sensitive information. It affects versions 21.2.1 and earlier on Windows and Linux.
- CVE-2025-69270Critical
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking. This issue affects DX NetOps Spectrum: 24.3.8 and earlier.
- CVE-2025-69269Critical
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection. This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Original NVD description (English source)
Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.