Read the docs

General Bytes

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

General Bytes records in CISA KEV

No General Bytes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Crypto Application Server 1 record HIGH

Records

2 records

TI-2023-13239 CVE-2023-28725 · GHSA-vxx2-f897-g654

General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes…

Priority HIGH 80

General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standa…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.20614 Published 2023-03-21 No fix listed CWE-434
TI-2022-04567 CVE-2022-4980 · GHSA-2wf3-7j9f-p79x

Missing authentication in General Bytes Crypto Application Server

Priority MEDIUM 41

General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00664 Published 2025-09-19 Fixed in 20220725.22, 20220531.38 CWE-306
Open these records in search →