CVE-2025-69272: Spectrum password returned in clear
Published Jan 12, 2026
·Updated
Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier.
Affected Software
4 affected components
Broadcom DX NetOps Spectrum<21.2.1
All of the following
Broadcom DX NetOps Spectrum<21.2.2
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Jan 12, 2026
CVE Published
via MITRE·04:33 AM
Data Sourced
via MITRE·04:33 AM
DescriptionWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-69272?
CVE-2025-69272 has a high severity rating due to the potential for sniffing attacks that can expose sensitive information.
2
How do I fix CVE-2025-69272?
To fix CVE-2025-69272, upgrade Broadcom DX NetOps Spectrum to version 21.2.2 or later.
3
What types of attacks are possible with CVE-2025-69272?
CVE-2025-69272 allows for sniffing attacks where an attacker can intercept and access sensitive data transmitted in cleartext.
4
Which versions of DX NetOps Spectrum are affected by CVE-2025-69272?
CVE-2025-69272 affects Broadcom DX NetOps Spectrum versions 21.2.1 and earlier.
5
Is CVE-2025-69272 a remote or local vulnerability?
CVE-2025-69272 is primarily a remote vulnerability, as it can be exploited through network sniffing.