CVE-2025-63214

24th percentile - higher than 24% of all known CVEs

An issue was discovered in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-10 and 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts. The vulnerability could be exploited to take control of the system.

An attacker could create fake accounts or delete existing ones, leading to service disruption, privilege escalation, and loss of system control. This may result in unauthorized access to sensitive information.

Update the firmware to the latest version that fixes this vulnerability. Restrict access to the management interface and implement strong authentication mechanisms.