An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.
References
| Link | Resource |
|---|---|
| https://bridgetech.tv/ | Product |
| https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63214_bridgetech%20VBC%20Server%20and%20Element%20Manager%20Broken%20Access%20Control | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Dec 2025, 21:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bridgetech.tv/ - Product | |
| References | () https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63214_bridgetech%20VBC%20Server%20and%20Element%20Manager%20Broken%20Access%20Control - Exploit, Third Party Advisory | |
| First Time |
Bridgetech vb220
Bridgetech vb440 Bridgetech vb120 Bridgetech vbc Server Bridgetech vb330 Bridgetech |
|
| CPE | cpe:2.3:h:bridgetech:vb330:-:*:*:*:*:*:*:* cpe:2.3:h:bridgetech:vb220:-:*:*:*:*:*:*:* cpe:2.3:a:bridgetech:vbc_server:6.5.0-9:*:*:*:*:*:*:* cpe:2.3:h:bridgetech:vb120:-:*:*:*:*:*:*:* cpe:2.3:h:bridgetech:vb440:-:*:*:*:*:*:*:* cpe:2.3:a:bridgetech:vbc_server:6.5.0-10:*:*:*:*:*:*:* |
20 Nov 2025, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-284 |
19 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-19 20:15
Updated : 2025-12-11 21:09
NVD link : CVE-2025-63214
Mitre link : CVE-2025-63214
CVE.ORG link : CVE-2025-63214
JSON object : View
Products Affected
bridgetech
- vb120
- vb440
- vbc_server
- vb220
- vb330
CWE
CWE-284
Improper Access Control