CVE-2025-69273
HighSummary
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
Risk Assessment
An attacker could bypass authentication mechanisms and gain unauthorized access to the system, potentially leading to data confidentiality and integrity breaches.
Recommendation
It is recommended to update DX NetOps Spectrum to a version newer than 24.3.10 that includes the fix. Also, implement additional access control mechanisms.
Other vulnerabilities in Broadcom DX NetOps Spectrum
See all- CVE-2025-69274High
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69272High
CVE-2025-69272 is a vulnerability in Broadcom DX NetOps Spectrum that allows sniffing attacks due to cleartext transmission of sensitive information. It affects versions 21.2.1 and earlier on Windows and Linux.
- CVE-2025-69271High
Broadcom DX NetOps Spectrum versions 24.3.13 and earlier contain a vulnerability due to insufficiently protected credentials, allowing sniffing attacks on Windows and Linux systems.
- CVE-2025-69270Critical
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking. This issue affects DX NetOps Spectrum: 24.3.8 and earlier.
- CVE-2025-69269Critical
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection. This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Original NVD description (English source)
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.