Yüksek CVSS 7.5 PoC var
CVE-2025-63205: Vb220 Firmware: hassas bilgi ifşası
Açıklama (NVD)
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.
Özet bilgiler
- Ürün
- Bridgetech Vb220 Firmware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,40 (yüzdelik 35)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| bridgetech-vb220-firmware | 6.5.0-9 | 6.5.0-9 | — |
| bridgetech-vb120-firmware | 6.5.0-9 | 6.5.0-9 | — |
| bridgetech-vb330-firmware | 6.5.0-9 | 6.5.0-9 | — |
| bridgetech-vb440-firmware | 6.5.0-9 | 6.5.0-9 | — |
| bridgetech-nomad-portable-firmware | 6.5.0-9 | 6.5.0-9 | — |