CVE-2025-2185CWE-613
ALBEDO Telecom Net.Time - PTP/NTP Clock Insufficient Session Expiration
High · published April 24, 2025
What it is
ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which
could permit an attacker to transmit passwords over unencrypted
connections, resulting in the product becoming vulnerable to
interception.
The record
Technical detail
- CVSS v4.0
- 8.5 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00318 · 23.5th percentile
- Weakness
- CWE-613 · Insufficient Session Expiration
- Published
- 2025-04-24T23:22Z
EPSS history
Timeline