CVE-2025-69274

CVE-2025-69274 affects Broadcom DX NetOps Spectrum up to version 24.3.10 (Windows and Linux). The issue is an authorization bypass caused by a user-controlled key, which could enable privilege escalation. Public sources consistently cite 24.3.10 and earlier as affected. Remediation is to upgrade ...

CVE-2025-69273

CVE-2025-69273 relates to Broadcom DX NetOps Spectrum running on Windows and Linux, with versions 24.3.10 and earlier affected. The issue is described as an improper authentication vulnerability that allows an authentication bypass, potentially enabling unauthorized access to the system. The link...

CVE-2025-69273 Spectrum broken authentication

Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier...

CVE-2025-69273 Spectrum broken authentication

Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier...

CVE-2025-69272

CVE-2025-69272 : Cleartext Transmission of Sensitive Information in Broadcom DX NetOps Spectrum on Windows and Linux. Affects Spectrum versions 21.2.1 and earlier; enables sniffing attacks due to unencrypted transmission of sensitive data. Connected sources corroborate affected products/versions ...

CVE-2025-69272 Spectrum password returned in clear

Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier...

CVE-2025-69272 Spectrum password returned in clear

Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier...

CVE-2025-69271

CVE-2025-69271 affects Broadcom DX NetOps Spectrum (Windows and Linux) up to version 24.3.13. The issue is described as insufficiently protected credentials that enable sniffing attacks. Multiple sources in connected documents corroborate the affected product and versions. Practical impact center...

CVE-2025-69271 Spectrum basic authentication in use

Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...

CVE-2025-69271 Spectrum basic authentication in use

Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier...

CVE-2025-69270 Spectrum session token in URL

Information Exposure Through Query Strings in GET Request vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Session Hijacking.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69269 Spectrum command injection in NCM service

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier...

EUVD-2026-1955

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier...

CVE-2025-69269

CVE-2025-69269 affects Broadcom DX NetOps Spectrum on Windows and Linux (versions 23.3.6 and earlier). Description: OS Command Injection caused by improper neutralization of special elements used in commands. The issue can enable arbitrary OS command execution with high impact on confidentiality,...

CVE-2025-69268

CVE-2025-69268 affects Broadcom DX NetOps Spectrum versions 24.3.8 and earlier. The root cause is improper neutralization of input during web page generation, leading to a reflected XSS vulnerability. Affected platforms include Windows and Linux. The vulnerability information is confirmed by mult...

CVE-2025-69268 Spectrum reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69268 Spectrum reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Reflected XSS.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69267 Spectrum directory path traversal

Improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...

CVE-2025-69267

CVE-2025-69267 is a path traversal vulnerability in Broadcom DX NetOps Spectrum (Windows/Linux). Affected versions are 24.3.8 and earlier; the root cause is improper restriction of a pathname to a restricted directory. The issue could enable access to files outside the intended scope. Red Hat and...

CVE-2025-69267 Spectrum directory path traversal

Improper Limitation of a Pathname to a Restricted Directory Path Traversal vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Traversal.This issue affects DX NetOps Spectrum: 24.3.8 and earlier...