CVE-2025-63205
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
75/100
Published: 2025-11-19
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.
Weakness Classification (1)
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| bridgetech | nomad_portable_firmware | 6.5.0-9 |
| bridgetech | vb120_firmware | 6.5.0-9 |
| bridgetech | vb220_firmware | 6.5.0-9 |
| bridgetech | vb330_firmware | 6.5.0-9 |
| bridgetech | vb440_firmware | 6.5.0-9 |
References & Advisories (2)
Product
Exploit
Third Party Advisory