CVE-2025-63205: Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 10:12 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 34% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 19 Nov 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Verify the exact firmware version of all deployed Bridgetech probes to determine if they fall within the vulnerable range.
- Upgrade all affected devices to firmware version 5.6.0-4 or later, or the latest available version confirmed by the supplier to contain the fix.
- If immediate patching is not feasible, restrict network access to the probes by implementing strict firewall rules limiting access to trusted management networks only.
- Monitor network traffic for unusual access attempts to the /probe/core/setup/passwd endpoint and implement intrusion detection rules to alert on such activity.
- Change all administrator passwords on affected devices after patching to invalidate any potentially compromised credentials.
- Conduct regular audits of device configurations and access logs to detect any unauthorized access.
- Engage with the vendor for official advisories and updates to ensure alignment with their remediation guidance.
- Consider network segmentation to isolate monitoring probes from general user networks and the internet to reduce exposure.
- Implement multi-factor authentication if supported by the devices to add an additional layer of security.
- Educate network and security teams about this vulnerability and the importance of timely patch management for embedded network devices.
Description
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint. NOTE: the Supplier disagrees that 6.5.0-9 is affected, and instead reports that 5.6.0-3 and earlier are affected, and 5.6.0-4 (2020-09-21) and later are fixed.