CVE-2025-63205
Full vulnerability record from the local CVENow database.
Description
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-11-19 18:15:48.507000
Last modified
2026-11-05 13:10:00.180000
View original CVE JSON
{
"id": "CVE-2025-63205",
"sourceIdentifier": "[email protected]",
"published": "2025-11-19T18:15:48.507",
"lastModified": "2026-11-05T13:10:00.180",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed."
},
{
"lang": "es",
"value": "Se descubrió un problema en las sondas bridgetech VB220 IP Network Probe, VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe y NOMAD, versiones de firmware 6.5.0-9, lo que permite a los atacantes obtener información sensible, como contraseñas de administrador, a través del endpoint /probe/core/setup/passwd."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-11-20T16:09:33.827905Z",
"id": "CVE-2025-63205",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:bridgetech:vb220_firmware:6.5.0-9:*:*:*:*:*:*:*",
"matchCriteriaId": "2D7D8CF1-C66C-492D-ABF6-D531FCC42C79"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:bridgetech:vb220:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D610E2AE-FD9A-44E0-97A6-68490DB73407"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:bridgetech:vb120_firmware:6.5.0-9:*:*:*:*:*:*:*",
"matchCriteriaId": "0707CFD3-BA37-4377-BE38-1BD3FC6F1C50"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:bridgetech:vb120:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F17C4BB8-D15D-4F72-A0EE-FFA316E98A61"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:bridgetech:vb330_firmware:6.5.0-9:*:*:*:*:*:*:*",
"matchCriteriaId": "93B007C6-6FD6-4F75-B74A-4E25C90D2E9A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:bridgetech:vb330:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BBCB33B7-6296-4EA0-84F9-C8BC49C4390A"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:bridgetech:vb440_firmware:6.5.0-9:*:*:*:*:*:*:*",
"matchCriteriaId": "0710088E-8FA0-4F7A-A346-974CB9EB8422"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:bridgetech:vb440:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2146DDCD-DE8C-4792-B122-5A362C84FF2D"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:bridgetech:nomad_portable_firmware:6.5.0-9:*:*:*:*:*:*:*",
"matchCriteriaId": "581EE039-0B78-4805-8D2C-84AA78279FA4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:bridgetech:nomad_portable:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FBD8F52D-3CE9-454E-81AC-8AD32D5691BB"
}
]
}
]
}
],
"references": [
{
"url": "https://bridgetech.tv/",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}