Filtered by vendor Bund
Subscribe
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-42982 | 1 Bund | 1 Bkg Professional Ntripcaster | 2025-04-30 | N/A | 7.5 HIGH |
|
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Normally, only authenticated streaming data will be provided over UDP and not the sourcetable.
|
|||||
| CVE-2023-3034 | 1 Bund | 1 Bkg Professional Ntripcaster | 2024-11-21 | N/A | 4.7 MEDIUM |
|
Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44
|
|||||
| CVE-2022-33172 | 1 Bund | 1 De.fac2 | 2024-11-21 | N/A | 5.5 MEDIUM |
|
de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.
|
|||||