Ad

CVE-2025-69272

MEDIUM CVSS 4.0: 5.3 EPSS 0.02%
Updated Jan 14, 2026
Broadcom
Parameter Value
CVSS 5.3 (MEDIUM)
Affected Versions before 21.2.2
Fixed In 21.2.2
Type CWE-319 (Cleartext Transmission)
Vendor Broadcom
Public PoC No

Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v4.0

Vulnerable Products 3

Configuration From (including) Up to (excluding)
Broadcom Dx_Netops_Spectrum
cpe:2.3:a:broadcom:dx_netops_spectrum:*:*:*:*:*:*:*:*
21.2.2
Linux Linux_Kernel
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
Microsoft Windows
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*