CVE-2025-2185
ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.5
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.30%
- CWE
- CWE-613
- Published
- 2025-04-24
- Last modified
- 2026-03-12
Affected products
- ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P)
Weakness type
Related vulnerabilities
- CVE-2026-87014 — Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
- CVE-2026-80174 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-55250 — Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches
- CVE-2026-86215 — Mstfakts College-Management-System Logout server.php session expiration
- CVE-2026-55513 — nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens
- CVE-2026-61608 — SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links
- CVE-2026-84480 — WWBN AVideo Password Recovery Token Expiration Bypass
- CVE-2026-84203 — Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change