CVE-2025-63205

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics…

High · published November 19, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
33.2
In the wild
Unconfirmed
What it is

⚡ A simple request to the wrong endpoint could reveal sensitive administrator passwords! Think of it like a highly confidential employee directory that's accidentally left open to the public — anyone can just stroll up and read it without any security checks! An attacker exploiting this vulnerability could gain unauthorized access to sensitive information, including admin passwords, putting your entire network at risk. This could lead to unauthorized system access, manipulation of data, or even further attacks on your infrastructure. It's a serious breach of security that needs immediate attention!

Put simply

Think of it like a highly confidential employee directory that's accidentally left open to the public — anyone can just stroll up and read it without any security checks! This vulnerability in various bridgetech probes allows attackers to access sensitive information through the /probe/core/setup/passwd endpoint, potentially exposing admin credentials without proper authentication.

What to do

An attacker exploiting this vulnerability could gain unauthorized access to sensitive information, including admin passwords, putting your entire network at risk. This could lead to unauthorized system access, manipulation of data, or even further attacks on your infrastructure. It's a serious breach of security that needs immediate attention! To protect yourself from this vulnerability, ensure your firmware is upgraded to version 5.6.0-4 or later. Review your network configurations and consider restricting access to sensitive endpoints. Always keep security patches up to date! You've got this! Follow these steps to lock down your systems and bolster your defenses. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00401 · 33.2th percentile
Published
2025-11-19T00:00Z
EPSS history
Timeline
  • 19 NOV 00:00Z
    An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics…
    cvelistv5