Vulnerability Details CVE-2025-63208
An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6.0-8, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.0%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2025-63208
-
cpe:2.3:h:bridgetech:vb288:-
-
cpe:2.3:o:bridgetech:vb288_firmware:5.6.0-8