Broadcom DX NetOps Spectrum Authorization Bypass Vulnerability Allowing Privilege Escalation

A vulnerability allowing authorization bypass through user-controlled keys has been identified in Broadcom DX NetOps Spectrum versions 24.3.10 and earlier on both Windows and Linux. This vulnerability enables low-privileged users to perform actions on behalf of other users, including administrators, potentially leading to unauthorized access or manipulation of user sessions.

Impact

Exploitation of this vulnerability could allow a low-privileged user to access and manipulate the sessions of other users, including administrators, potentially leading to unauthorized actions or access to sensitive information.

Remediation

Users can upgrade to Broadcom DX NetOps Spectrum version 24.3.11 or later to address this vulnerability. Instructions for upgrading are available on the Broadcom Support website.