{"timestamp":"2025-11-20T16:09:33.827905Z","id":"CVE-2025-63205","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint.

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.

AND
     OR
          *cpe:2.3:o:bridgetech:nomad_portable_firmware:6.5.0-9:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:bridgetech:nomad_portable:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:bridgetech:vb120_firmware:6.5.0-9:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:bridgetech:vb120:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:bridgetech:vb220_firmware:6.5.0-9:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:bridgetech:vb220:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:bridgetech:vb330_firmware:6.5.0-9:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:bridgetech:vb330:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:bridgetech:vb440_firmware:6.5.0-9:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:bridgetech:vb440:-:*:*:*:*:*:*:*

CISA-ADP: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure Types: Exploit, Third Party Advisory

MITRE: https://bridgetech.tv/ Types: Product

MITRE: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure Types: Exploit, Third Party Advisory

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-200

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint.

https://bridgetech.tv/

https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63205_bridgetech%20probes%20Information%20Disclosure