PT-2025-47031 · Brightpick · Brightpick Mission Control

Published 2025-11-14 · Updated 2025-11-20 · CVE-2025-64309

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brightpick Mission Control (affected versions not specified)

Description Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users connecting to a specific URL. The URL can be discovered through basic network scanning techniques.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-523

Related Identifiers

CVE-2025-64309

Affected Products

Brightpick Mission Control

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-64309 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-04.json · Note
• https://t.me/CVEtracker/37394 · Telegram Post
• https://twitter.com/gothburz/status/1989747865703362629 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-317-04 · Note
• https://twitter.com/gothburz/status/1990465847366672476 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1989501806968197552 · Twitter Post
• https://twitter.com/CVEnew/status/1989481092743627259 · Twitter Post
• https://twitter.com/cracbot/status/1991461566018129982 · Twitter Post
• https://twitter.com/CveTodo/status/1989491636934431231 · Twitter Post
• https://brightpick.ai/contact-us · Note
• https://twitter.com/CveFindCom/status/1989493755238371695 · Twitter Post