PT-2025-47492 · Bridgetech · Nomad+4
CVE-2025-63205
·
Publicado
2025-11-19
·
Atualizado
2025-11-20
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
bridgetech probes VB220 IP Network Probe, VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD versions 6.5.0-9
Description
An issue exists that allows attackers to gain sensitive information, such as administrator passwords. The sensitive information can be obtained via the
/probe/core/setup/passwd API endpoint.Recommendations
Update firmware to a version newer than 6.5.0-9.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nomad
Vb120 Embedded Ip + Rf Probe
Vb220 Ip Network Probe
Vb330 High-Capacity Probe
Vb440 St 2110 Production Analytics Probe