Brightpick Mission Control / Internal Logic Control
Approved changes feed: RSS · Atom
cpe:2.3:a:brightpick_ai:brightpick_mission_control_/_internal_logic_control:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Brightpick Ai (ea70f1a4-1178-5bbc-87ad-d24e7ce886f7) |
|---|---|
| Product | Brightpick Mission Control / Internal Logic Control (91c6b813-c9db-5711-93ce-7358bb7236f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64309 |
vulnerable | 2026-06-08 07:39:18.356749 |
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
HIGH (7.4)
The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.
Published: 2025-11-14T23:41:18.445Z
Updated: 2026-06-25T22:22:32.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64308 |
vulnerable | 2026-06-08 07:39:18.356433 |
Brightpick Mission Control / Internal Logic Control Unprotected Transport of Credentials
MEDIUM (6.5)
The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal.
Published: 2025-11-14T23:38:48.467Z
Updated: 2026-06-25T22:17:51.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64307 |
vulnerable | 2026-06-08 07:39:18.355948 |
Brightpick Mission Control / Internal Logic Control Missing Authentication for Critical Function
MEDIUM (6.5)
The Brightpick Internal Logic Control web interface is accessible without requiring user authentication. An unauthorized user could exploit this interface to manipulate robot control functions, including initiating or halting runners, assigning jobs, clearing stations, and deploying storage totes.
Published: 2025-11-14T23:34:59.659Z
Updated: 2026-06-25T22:21:12.733Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.