CVE-2025-2185
ALBEDO Telecom Net.Time - PTP/NTP Clock Insufficient Session Expiration
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
24 Apr 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which
could permit an attacker to transmit passwords over unencrypted
connections, resulting in the product becoming vulnerable to
interception.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
ALBEDO Telecom · Net.Time - PTP/NTP clock (Serial No. NBC0081P)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →