CVE-2025-64309 — Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The…
Published: 2025-11-14 · CVSS: 6.0 · CVSS 4.0
The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7