CVE-2025-69273CWE-287

Spectrum broken authentication

High · published January 12, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

⚡ An authentication bypass is all it takes to stroll right into Broadcom's DX NetOps Spectrum! 🔓 Think of it as a hotel with a broken lock — anyone can waltz in without a key and access the rooms. This vulnerability means that an attacker can bypass authentication entirely, just like sneaking into a VIP party without an invite! The stakes are high here! An attacker could gain unauthorized access to sensitive network management features, potentially messing with configurations, stealing data, or even disrupting services. This could lead to significant downtime and a whole lot of headaches for your operations team!

Put simply

Think of it as a hotel with a broken lock — anyone can waltz in without a key and access the rooms. This vulnerability means that an attacker can bypass authentication entirely, just like sneaking into a VIP party without an invite! CVE-2025-69273 is an improper authentication vulnerability in Broadcom DX NetOps Spectrum, allowing attackers to bypass authentication checks on Windows and Linux systems. The flaw affects versions 24.3.10 and earlier, making it crucial for users to act fast.

What to do

The stakes are high here! An attacker could gain unauthorized access to sensitive network management features, potentially messing with configurations, stealing data, or even disrupting services. This could lead to significant downtime and a whole lot of headaches for your operations team! To safeguard your systems, immediately upgrade to the latest version of DX NetOps Spectrum that addresses this vulnerability. Until you can patch, review user permissions and monitor logs for any unauthorized access attempts. You can do this! With a quick update, you'll reinforce your defenses and keep your network secure. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00347 · 27.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-01-12T04:38Z
EPSS history
Timeline
  • 12 JAN 04:38Z
    Spectrum broken authentication
    cvelistv5