CVE-2025-69271CWE-522

Spectrum basic authentication in use

Low · published January 12, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

⚠️ Unprotected credentials are just sitting out there! The Broadcom DX NetOps Spectrum versions 24.3.13 and earlier are vulnerable to sniffing attacks, allowing eavesdroppers to peek at sensitive data. 📡 Think of it like a restaurant where the waitstaff shouts your order across the room instead of writing it down. Anyone within earshot could easily jot down your private meal choices, and trust me, you don't want that kind of attention! If an attacker is able to intercept these credentials, they could potentially gain unauthorized access to sensitive areas of your network, compromising data integrity and confidentiality. While not the end of the world, even low risk can lead to unexpected headaches. Let's not give them easy opportunities!

Put simply

Think of it like a restaurant where the waitstaff shouts your order across the room instead of writing it down. Anyone within earshot could easily jot down your private meal choices, and trust me, you don't want that kind of attention! This vulnerability arises from insufficient protection of credentials during transmission, making them vulnerable to sniffing attacks. It means that attackers can capture sensitive information over the network if they are in a position to listen in.

What to do

If an attacker is able to intercept these credentials, they could potentially gain unauthorized access to sensitive areas of your network, compromising data integrity and confidentiality. While not the end of the world, even low risk can lead to unexpected headaches. Let's not give them easy opportunities! To safeguard yourself, it's essential to update to a version later than 24.3.13 as soon as possible. Additionally, consider implementing encrypted communication protocols and regularly auditing your network for unusual activity. Don't wait too long! You've got this! Stay proactive and your network will be in great shape! 🛡️

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-01-12T04:27Z
EPSS history
Timeline
  • 12 JAN 04:27Z
    Spectrum basic authentication in use
    cvelistv5