Vulnerability Details CVE-2025-63205
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.6%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2025-63205
-
cpe:2.3:h:bridgetech:nomad_portable:-
-
cpe:2.3:h:bridgetech:vb120:-
-
cpe:2.3:h:bridgetech:vb220:-
-
cpe:2.3:h:bridgetech:vb330:-
-
cpe:2.3:h:bridgetech:vb440:-
-
cpe:2.3:o:bridgetech:nomad_portable_firmware:6.5.0-9
-
cpe:2.3:o:bridgetech:vb120_firmware:6.5.0-9
-
cpe:2.3:o:bridgetech:vb220_firmware:6.5.0-9
-
cpe:2.3:o:bridgetech:vb330_firmware:6.5.0-9
-
cpe:2.3:o:bridgetech:vb440_firmware:6.5.0-9