CVE-2025-69274
HighSummary
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
Risk Assessment
An attacker could gain unauthorized access to administrative functions, potentially leading to full compromise of the network monitoring system.
Recommendation
It is recommended to update DX NetOps Spectrum to a version newer than 24.3.10 that includes the fix. Also, restrict access to the system to trusted users only.
Other vulnerabilities in Broadcom DX NetOps Spectrum
See all- CVE-2025-69273High
Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass. This issue affects DX NetOps Spectrum: 24.3.10 and earlier.
- CVE-2025-69272High
CVE-2025-69272 is a vulnerability in Broadcom DX NetOps Spectrum that allows sniffing attacks due to cleartext transmission of sensitive information. It affects versions 21.2.1 and earlier on Windows and Linux.
- CVE-2025-69271High
Broadcom DX NetOps Spectrum versions 24.3.13 and earlier contain a vulnerability due to insufficiently protected credentials, allowing sniffing attacks on Windows and Linux systems.
- CVE-2025-69270Critical
Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking. This issue affects DX NetOps Spectrum: 24.3.8 and earlier.
- CVE-2025-69269Critical
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection. This issue affects DX NetOps Spectrum: 23.3.6 and earlier.
Original NVD description (English source)
Authorization Bypass Through User-Controlled Key vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Privilege Escalation.This issue affects DX NetOps Spectrum: 24.3.10 and earlier.