Vulnerabilidades do Bridgetech Vbc Server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Bridgetech Vbc Server: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:bridgetech:vbc_server

CVE-2025-63214 Média · 6.5 CWE-284 19/11/2025

Improper Access Control em Bridgetech Vbc Server

An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.

CVE-2025-63211 Média · 6.1 CWE-79 19/11/2025

Cross-site Scripting (XSS) em Bridgetech Vbc Server

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.