Vulnerabilities

TI-2023-02841 CVE-2023-3034 · GHSA-rc54-8mxm-g5hf

Reflected XSS in BKG Ntrip Professional Caster version <=2.0.44

LOW 27

Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0035 Published 2023-06-28 No fix listed CWE-20

TI-2022-20960 CVE-2022-42982 · GHSA-vpvj-q3rf-q5fh

MEDIUM 40

BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00719 Published 2022-11-17 No fix listed CWE-306

TI-2022-14605 CVE-2022-33172 · GHSA-px5v-c4gg-m3mg

LOW 24

de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2022-08-24 No fix listed