Filtered by vendor Bund
Subscriptions
Filtered by product Bkg Professional Ntripcaster
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-3034 | 1 Bund | 1 Bkg Professional Ntripcaster | 2023-07-06 | 6.1 Medium |
| Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44 | ||||
| CVE-2022-42982 | 1 Bund | 1 Bkg Professional Ntripcaster | 2022-11-21 | 7.5 High |
| BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Normally, only authenticated streaming data will be provided over UDP and not the sourcetable. | ||||
Page 1 of 1.