目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

Broadcom 厂商漏洞列表 / CVE 中文分析 88

Broadcom 厂商相关 88 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

博通是全球领先的半导体与基础设施软件供应商，其业务涵盖网络芯片、无线连接技术及企业级软件。历史上，其产品中常见远程代码执行、缓冲区溢出及身份验证绕过等高危漏洞。近期收录的88条CVE多涉及固件与驱动层，部分导致权限提升或信息泄露。作为关键基础设施提供商，其安全更新响应速度及补丁覆盖范围对全球网络稳定性具有重要影响，需持续关注其固件供应链风险。

上位製品 Broadcom: LSI Storage Authority (LSA) Symantec Privileged Access Management BCM5820X DX NetOps Spectrum Brocade SANnav Brocade ASCG WiFi drivers brcmfmac WiFi driver Symantec IT Management Suite Symantec Endpoint Protection Windows Client Symantec PGP Encryption Data Loss Prevention SiteMinder Symantec Web Security Services Agent Unified Infrastructure Management 8.6.IT Management Suite Brocade Fabric OS Automic Automation CA Client Automation (ITCM) Symantec SiteMinder
CVE IDタイトルCVSS深刻度公開日
CVE-2026-3991 Elevation of Privileges in Symantec Data Loss Prevention Windows Endpoint — Data Loss PreventionCWE-829 7.8 High2026-03-30
CVE-2026-3862 Cross-Site Scripting Vulnerability in SiteMinder Administrative UI — SiteMinder 6.1AIMediumAI2026-03-10
CVE-2025-13919 Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client — Symantec Endpoint Protection Windows ClientCWE-427 4.4 Medium2026-01-28
CVE-2025-13918 Elevation of Privileges in Symantec Endpoint Protection Windows Client — Symantec Endpoint Protection Windows ClientCWE-269 6.7 Medium2026-01-28
CVE-2025-13917 Elevation of Privileges in Web Security Services (WSS) Agent — Symantec Web Security Services AgentCWE-269 7.0 High2026-01-28
CVE-2025-69276 Spectrum insecure deserialiation — DX NetOps SpectrumCWE-502 9.8AICriticalAI2026-01-12
CVE-2025-69275 Spectrum outdated java library in class-path — DX NetOps SpectrumCWE-1395 6.1AIMediumAI2026-01-12
CVE-2025-69274 Spectrum broken authorization scheme — DX NetOps SpectrumCWE-639 7.8AIHighAI2026-01-12
CVE-2025-69273 Spectrum broken authentication — DX NetOps SpectrumCWE-287 9.8AICriticalAI2026-01-12
CVE-2025-69272 Spectrum password returned in clear — DX NetOps SpectrumCWE-319 5.9AIMediumAI2026-01-12
CVE-2025-69271 Spectrum basic authentication in use — DX NetOps SpectrumCWE-522 8.1AIHighAI2026-01-12
CVE-2025-69270 Spectrum session token in URL — DX NetOps SpectrumCWE-598 8.1AIHighAI2026-01-12
CVE-2025-69269 Spectrum command injection in NCM service — DX NetOps SpectrumCWE-78 8.8AIHighAI2026-01-12
CVE-2025-69268 Spectrum reflected XSS — DX NetOps SpectrumCWE-79 6.1AIMediumAI2026-01-12
CVE-2025-69267 Spectrum directory path traversal — DX NetOps SpectrumCWE-22 6.5AIMediumAI2026-01-12
CVE-2025-31649 Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability — BCM5820XCWE-908 8.7 High2025-11-17
CVE-2025-31361 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerability — BCM5820XCWE-908 8.7 High2025-11-17
CVE-2025-36463 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability — BCM5820XCWE-805 7.3 High2025-11-17
CVE-2025-36462 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability — BCM5820XCWE-805 7.3 High2025-11-17
CVE-2025-36461 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability — BCM5820XCWE-805 7.3 High2025-11-17
CVE-2025-36460 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability — BCM5820XCWE-805 7.3 High2025-11-17
CVE-2025-32089 Dell ControlVault3 CvManager_SBI buffer overflow vulnerability — BCM5820XCWE-120 8.8 High2025-11-17
CVE-2025-36553 Dell ControlVault3 CvManager buffer overflow vulnerability — BCM5820XCWE-120 8.8 High2025-11-17
CVE-2025-10847 DX UIM Probe Improper ACL Handling RCE — Unified Infrastructure Management 9.8AICriticalAI2025-10-01
CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite — 8.6.IT Management SuiteCWE-427 7.8AIHighAI2025-09-11
CVE-2025-8661 Stored Cross-Site Scripting in Symantec PGP Encryption 11.0.1 — Symantec PGP Encryption 5.4AIMediumAI2025-08-11
CVE-2025-8660 Privilege Escalation in Symantec PGP Encryption 11.0.1 — Symantec PGP Encryption 8.8AIHighAI2025-08-11
CVE-2025-7397 CLI history displays inline passwords — Brocade ASCGCWE-312 5.5AIMediumAI2025-07-17
CVE-2025-6391 JSON Web Token (JWT) Exposure in Log Files — Brocade ASCGCWE-532 8.1AIHighAI2025-07-17
CVE-2025-7398 Medium Strength Cipher Suites detected on port on ports 9000 and 8036 — Brocade ASCGCWE-326 5.9AIMediumAI2025-07-17

本页汇总了 Broadcom 厂商截至目前公开的全部 88 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。