CVE-2025-2185 HIGH

CVE-2025-2185: ALBEDO Telecom Net.Time - PTP/NTP Clock Insufficient Session Expiration

Vendor Albedo Telecom
Product Net.Time - PTP/NTP clock (Serial No. NBC0081P)
Weakness CWE-613 · Insufficient session expiration
Published April 24, 2025
Last update April 25, 2025
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.

Key dates

02Disclosure timeline

April 24, 2025 CVE published
April 25, 2025 Record updated