CVE-2025-69269 is a high-severity OS command injection vulnerability in Broadcom DX NetOps Spectrum versions 23.3.6 and earlier on Windows and Linux. It arises from improper neutralization of special elements in OS commands, allowing an attacker with low privileges to execute arbitrary commands without user interaction. The vulnerability has a CVSS 4.0 base score of 7.1, indicating significant risk due to its potential impact on system integrity and availability. Although no known exploits are reported in the wild, successful exploitation could lead to system compromise or disruption of network monitoring operations. European organizations relying on DX NetOps Spectrum for network management are at risk, especially in countries with high adoption of Broadcom products and critical infrastructure sectors. Mitigation requires applying vendor patches once available, restricting access to the management interfaces, and implementing strict input validation and command execution controls.
CVE-2025-69268 is a medium-severity reflected Cross-site Scripting (XSS) vulnerability in Broadcom DX NetOps Spectrum versions 24.3.8 and earlier. It arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that execute in the context of the victim's browser. The vulnerability requires no user interaction and can be exploited remotely over the network without authentication, but it demands low privileges on the system. While no known exploits are currently reported in the wild, successful exploitation could lead to session hijacking, unauthorized actions, or information disclosure within the affected management console. European organizations using DX NetOps Spectrum for network monitoring and management could face risks to confidentiality and integrity of their network operations data. Mitigation involves applying vendor patches once available, implementing strict input validation and output encoding on web interfaces, and restricting access to the management console via network segmentation and strong access controls. Countries with significant Broadcom enterprise deployments and critical infrastructure reliance on network monitoring, such as Germany, France, the UK, and the Netherlands, are most likely to be affected. Given the moderate CVSS score of 5.
CVE-2025-69267 is a high-severity path traversal vulnerability in Broadcom DX NetOps Spectrum versions 24.3.8 and earlier on Windows and Linux. It allows an attacker with low privileges to manipulate file paths to access restricted directories, potentially compromising confidentiality and integrity. Exploitation requires no user interaction but has high attack complexity. There are no known exploits in the wild yet, and no patches have been released. European organizations using DX NetOps Spectrum for network monitoring are at risk, especially in countries with significant Broadcom customer bases. Mitigation involves strict input validation, restricting file system permissions, and monitoring for suspicious path access attempts. Given the critical role of network management tools, exploitation could lead to significant operational disruption and data exposure. Countries like Germany, France, UK, and the Netherlands are likely most affected due to their large enterprise IT sectors and Broadcom product adoption.
A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call to trigger this vulnerability.
A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to privilege escalation. An attacker can issue an api call to trigger this vulnerability.
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 4 (`WBIO_USH_ADD_RECORD`) and with an invalid `SendBufferSize`.
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 3 (`WBIO_USH_CREATE_CHALLENGE`) with an invalid `ReceiveBuferSize`.
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 0 (`WBIO_USH_GET_TEMPLATE`) and with either and an invalid `ReceiveBuferSize` and/or an invalid `SendBufferSize`.
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 2 (`WBIO_USH_GET_IDENTITY`) with an improper `ReceiveBuferSize` value.
A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to a arbitrary code execution. An attacker can issue an api call to trigger this vulnerability.
A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability.
DX Unified Infrastructure Management (Nimsoft/UIM) and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute commands, read from, or write to the target system.
A vulnerability in the ascgshell, of
Brocade ASCG before 3.3.0 stores any command executed in the Command
Line Interface (CLI) in plain text within the command history. A local
authenticated user that can access sensitive information like passwords
within the CLI history leading to unauthorized access and potential data
breaches.
Brocade ASCG before 3.3.0 logs JSON
Web Tokens (JWT) in log files. An attacker with access to the log files
can withdraw the unencrypted tokens with security implications, such as
unauthorized access, session hijacking, and information disclosure.
Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.
Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.
