CVE-2025-63205

HIGH EPSS 24.5%
Published Nov 19, 20257mo ago · Modified Jun 17, 20261w ago
7.5 CVSS 3.1
High
Find Similar
Published Nov 19, 2025 7mo ago
Last Modified Jun 17, 2026 1w ago

Description

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
24.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Information Exposure

Affected Products 10

VendorProductVersionRange
bridgetechvb220_firmware6.5.0-9any
bridgetechvb220*any
bridgetechvb120_firmware6.5.0-9any
bridgetechvb120*any
bridgetechvb330_firmware6.5.0-9any
bridgetechvb330*any
bridgetechvb440_firmware6.5.0-9any
bridgetechvb440*any
bridgetechnomad_portable_firmware6.5.0-9any
bridgetechnomad_portable*any

References 2

  • bridgetech.tv https://bridgetech.tv/
    Product
  • github.com https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.