CVE-2025-64309

Publication date

2025-11-14 23:41:18

Family

icscert

State

PUBLISHED

Description

Brightpick Mission Control discloses device telemetry, configuration, and credential information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.