PT-2026-1949 · Broadcom · Broadcom Dx Netops Spectrum

CVE-2025-69274 · Publicado 2026-01-12 · Atualizado 2026-01-17

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.10 and earlier

Description An authorization bypass exists due to a user-controlled key in Broadcom DX NetOps Spectrum on Windows and Linux, potentially leading to privilege escalation. The issue allows bypassing authorization mechanisms through manipulation of keys controlled by the user.

Recommendations Update to a version later than 24.3.10.

Correção

LPE

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2025-69274

Produtos afetados

Broadcom Dx Netops Spectrum

Referências · 6

• https://twitter.com/CVEnew/status/2010582398107324454 · Publicação no Twitter
• https://twitter.com/cracbot/status/2012480084821852611 · Publicação no Twitter
• https://t.me/CVEtracker/41973 · Publicação no Telegram
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-69274 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-69274 · Aviso do Fabricante