Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 41

General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00664 Published 2025-09-19 Fixed in 20220725.22, 20220531.38 CWE-306
Priority HIGH 80

General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standa…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.20614 Published 2023-03-21 No fix listed CWE-434