CVE-2025-69272CWE-319

Spectrum password returned in clear

Medium 路 published January 12, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

鈿狅笍 Sensitive data is being sent without encryption! The Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows and Linux could leave you exposed to sniffing attacks. 馃攳 Imagine sending your most important documents as postcards through the mail, where anyone can read them. That鈥檚 what鈥檚 happening here - sensitive data travels openly, just waiting for prying eyes to snatch it up! 馃摤 An attacker could intercept unencrypted data, potentially leading to unauthorized access to sensitive information such as user credentials or configuration details. This could result in a breach of confidentiality, putting your network at risk, albeit at a medium severity level.

Put simply

Imagine sending your most important documents as postcards through the mail, where anyone can read them. That鈥檚 what鈥檚 happening here - sensitive data travels openly, just waiting for prying eyes to snatch it up! 馃摤 This vulnerability occurs because sensitive information is transmitted in cleartext over the network, making it susceptible to sniffing attacks. It specifically affects Broadcom DX NetOps Spectrum versions 21.2.1 and earlier on both Windows and Linux systems.

What to do

An attacker could intercept unencrypted data, potentially leading to unauthorized access to sensitive information such as user credentials or configuration details. This could result in a breach of confidentiality, putting your network at risk, albeit at a medium severity level. To mitigate this vulnerability, ensure you upgrade to a patched version of Broadcom DX NetOps Spectrum. Additionally, implement encryption for sensitive data transmissions to guard against interception and enhance your network security. 馃敀 You can fix this! Follow the steps above to secure your system. You're doing great! 馃Ω

The record
Technical detail
CVSS v4.0
5.3 路 MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00169 路 5.9th percentile
Weakness
CWE-319 路 Cleartext Transmission of Sensitive Information
Published
2026-01-12T04:33Z
EPSS history
Timeline
  • 12 JAN 04:33Z
    Spectrum password returned in clear
    cvelistv5