Vulnerabilidades de Brightpick AI
CVEs publicadas que afetam produtos de Brightpick AI: 3 registro(s), com severidade, exploração e correções.
CVE-2025-64309
Alta · 7.4
CWE-523 14/11/2025
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.
CVE-2025-64308
Média · 6.5
CWE-523 14/11/2025
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.
CVE-2025-64307
Média · 6.5
CWE-306 14/11/2025
Brightpick Mission Control / Internal Logic Control Missing Authentication for Critical Function
The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to manipulate robot control functions, including initiating or halting runners, assigning jobs, clearing stations, and deploying storage totes.