CVE-2025-2185
ALBEDO Telecom Net.Time - PTP/NTP Clock Insufficient Session Expiration
- State
- Published
- Severity
- 8.5 High
- Published
- Apr 24, 2025
- Updated
- Apr 25, 2025
- Reserved
- Mar 10, 2025
Description
ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
| 3.1 | 8.0 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-613 Insufficient Session Expiration
Affected Products
| Product | Versions |
|---|---|
Net.Time - PTP/NTP clock (Serial No. NBC0081P)ALBEDO Telecom |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.