Insufficiently Protected Credentials in Broadcom DX NetOps Spectrum for Windows and Linux
CVE-2025-69271

2.3LOW

Key Information:

Vendor

Broadcom
Status
Dx Netops Spectrum
Vendor
CVE Published:
12 January 2026

What is CVE-2025-69271?

The vulnerability in Broadcom DX NetOps Spectrum allows attackers to exploit insufficiently protected credentials on Windows and Linux systems, enabling the potential for sniffing attacks. The issue is present in DX NetOps Spectrum versions 24.3.13 and earlier. Organizations using the affected software must take immediate actions to mitigate risks and secure their sensitive data from unauthorized access.

Affected Version(s)

DX NetOps Spectrum Windows 24.3.13 and earlier

DX NetOps Spectrum Windows 25.4.1 and later

References

https://support.broadcom.com/web/ecx/support-content-noti...
vendor-advisory

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jean-Michel Huguet and Jorge Escabias from NATO Cyber Security Centre
JSON
.