Cyber Resilience

CVE-2025-69271

Low

Published: 12 January 2026

Published
12 January 2026
Modified
14 January 2026
KEV Added
—
Patch
—
CVSS Score v4 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0004 11.6th percentile
Risk Priority 5 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-69271 is a low-severity Insufficiently Protected Credentials (CWE-522) vulnerability in Broadcom Dx Netops Spectrum. Its CVSS base score is 2.3 (Low).

Operationally, exploitation aligns with the MITRE ATT&CK technique Network Sniffing (T1040); ranked at the 11.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 IA-5 (Authenticator Management) and SC-8 (Transmission Confidentiality and Integrity).

Deeper analysis

CVE-2025-69271 is an Insufficiently Protected Credentials vulnerability (CWE-522) in Broadcom DX NetOps Spectrum on Windows and Linux platforms. It affects versions 24.3.13 and earlier, enabling sniffing attacks. Published on 2026-01-12T05:16:11.060, the issue carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting high severity primarily due to confidentiality impact.

Remote network-based attackers require no privileges, authentication, or user interaction to exploit this vulnerability. Successful attacks allow sniffing of credentials, resulting in high confidentiality loss without impacting integrity or availability.

Mitigation guidance is available in the Broadcom security advisory at https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756.

EU & UK References

Vulnerability details

Insufficiently Protected Credentials vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 24.3.13 and earlier.

CWE(s)
CWE-522

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1040 Network Sniffing Credential Access
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.
attack.mitre.org →
Why these techniques?

Vulnerability directly enables network sniffing of unprotected credentials (CWE-522) over remote connections.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-69272Same product: Broadcom Dx Netops Spectrum
CVE-2025-69269Same product: Broadcom Dx Netops Spectrum
CVE-2025-69270Same product: Broadcom Dx Netops Spectrum
CVE-2025-69273Same product: Broadcom Dx Netops Spectrum
CVE-2025-69274Same product: Broadcom Dx Netops Spectrum
CVE-2025-69276Same product: Broadcom Dx Netops Spectrum
CVE-2026-30796Same product: Linux Linux Kernel
CVE-2026-30795Same product: Linux Linux Kernel
CVE-2025-13718Same product: Linux Linux Kernel
CVE-2024-49779Same product: Linux Linux Kernel

Affected Assets

broadcom
dx netops spectrum
≤ 25.4.1

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

Directly mitigates the CVE by requiring timely flaw remediation through vendor patches for the insufficiently protected credentials in affected DX NetOps Spectrum versions.

SC-8 Transmission Confidentiality and Integrity good match
prevent

Enforces confidentiality and integrity protections for network transmissions, preventing sniffing attacks on exposed credentials.

IA-5 Authenticator Management good match
prevent

Requires protection of authenticator content from unauthorized disclosure during transmission, directly addressing the insufficient credential protection vulnerable to sniffing.

References