by Kastro
Paper/Archive/CVE-2025-69269

CVE-2025-69269

Broadcom DX NetOps Spectrum — Spectrum command injection in NCM service

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.3.593 × 2011.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier.

Affected

ProductAffectedFixed inSource
DX NetOps Spectrum23.3.6 and earlier23.3.7 and laterCNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ca (CNA)7.1CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

advisorysupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36756