Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-64309

Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials

Description

The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brightpick AI Brightpick Mission Control / Internal Logic Control

Default version status: unaffected

  • 0 to < 1.67.0affected
  • 1.67.0unaffected

References