CVE-2025-69272
HighSummary
CVE-2025-69272 is a vulnerability in Broadcom DX NetOps Spectrum that allows sniffing attacks due to cleartext transmission of sensitive information. It affects versions 21.2.1 and earlier on Windows and Linux.
Risk Assessment
An attacker on the network can intercept sensitive data transmitted between components, potentially exposing credentials or configuration details and compromising infrastructure security.
Recommendation
Upgrade DX NetOps Spectrum to a version newer than 21.2.1 if a patch is available. Additionally, consider implementing network-level encryption (e.g., VPN or TLS) and monitoring network traffic for suspicious activity.
Other vulnerabilities in Broadcom DX NetOps Spectrum
See all- CVE-2025-69274High
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69273High
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69271High
Broadcom DX NetOps Spectrum versions 24.3.13 and earlier contain a vulnerability due to insufficiently protected credentials, allowing sniffing attacks on Windows and Linux systems.
- CVE-2025-69270Critical
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking. This issue affects DX NetOps Spectrum: 24.3.8 and earlier.
- CVE-2025-69269Critical
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection. This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Original NVD description (English source)
Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.