Description
The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unauthenticated users when they connect to a specific URL. The unauthenticated URL can be discovered through basic network scanning techniques.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brightpick AI | Brightpick Mission Control / Internal Logic Control | < 1.67.0 | 1.67.0 |
Advisories 1
- ICSA-25-317-04 Brightpick Mission Control / Internal Logic Control (Update A) CISA ICS & IT advisories · Jun 23, 2026