Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63211 1 Bridgetech 1 Vbc Server Element Manager 2025-11-21 6.1 Medium
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
CVE-2025-63205 1 Bridgetech 5 Nomad, Vb120, Vb220 and 2 more 2025-11-21 7.5 High
An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the /probe/core/setup/passwd endpoint.