What’s Vulnerable › Vulnerabilities

CVE-2025-2185: ALBEDO Telecom Net.Time - PTP/NTP Clock Insufficient Session Expiration

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-25 · updated 2026-06-17
• Weakness: CWE-613

Description

ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which could permit an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to interception.

Affected products

• ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P): 1.4.4

References

• https://www.albedotelecom.com/contactus.php
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-02

Get alerted when CVE-2025-2185 or the next vulnerability affects your stack