Vulnerabilidades de Bridgetech
CVEs publicadas que afetam produtos de Bridgetech: 4 registro(s), com severidade, exploração e correções.
Vbc Server 2Vb220 Firmware 1Vb120 Firmware 1Vb330 Firmware 1Vb440 Firmware 1Nomad Portable Firmware 1Vb288 Firmware 1
CVE-2025-63214
Média · 6.5
CWE-284 19/11/2025
Improper Access Control em Bridgetech Vbc Server
An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.
CVE-2025-63211
Média · 6.1
CWE-79 19/11/2025
Cross-site Scripting (XSS) em Bridgetech Vbc Server
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
CVE-2025-63208
Alta · 7.5
CWE-312 19/11/2025
Cleartext Storage of Sensitive Information em Bridgetech Vb288 Firmware
An issue was discovered in bridgetech VB288 Objective QoE Content Extractor, firmware version 5.6.0-8, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint.
CVE-2025-63205
Alta · 7.5
CWE-200 19/11/2025
Exposure of Sensitive Information em Bridgetech Vb220 Firmware
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.