PT-2026-1944 · Broadcom · Broadcom Dx Netops Spectrum

Publicado 2026-01-12 · Atualizado 2026-01-17 · CVE-2025-69269

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 23.3.6 and earlier

Description A flaw exists in Broadcom DX NetOps Spectrum on Windows and Linux that allows for OS Command Injection. The issue is due to improper neutralization of special elements used in an OS command. This could allow an attacker to execute arbitrary commands on the underlying operating system.

Recommendations Update to a version of Broadcom DX NetOps Spectrum later than 23.3.6.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-69269

Produtos afetados

Broadcom Dx Netops Spectrum

Referências · 7

• https://t.me/cveNotify/148384 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-69269 · Aviso do Fabricante
• https://t.me/CVEtracker/41968 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2010571487150002652 · Publicação no Twitter
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2012480076340986155 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-69269 · Nota de Segurança