EUVD-2023-32363

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

General Bytes Crypto Application Server allows code execution via remote Java application uploads.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-28725	22 Mar 202306:48	–	circl
CNNVD	General Bytes Crypto Application Server 代码问题漏洞	21 Mar 202300:00	–	cnnvd
CVE	CVE-2023-28725	21 Mar 202300:00	–	cve
Cvelist	CVE-2023-28725	21 Mar 202300:00	–	cvelist
NVD	CVE-2023-28725	22 Mar 202300:15	–	nvd
Prion	Code injection	22 Mar 202300:15	–	prion
Positive Technologies	PT-2023-21922 · General Bytes · General Bytes Crypto Application Server	21 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28725	23 May 202506:03	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2023-28725	21 Mar 202300:00	–	vulncheck_kev
Vulnrichment	CVE-2023-28725	21 Mar 202300:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "06b9c235-6cfd-3e7b-beeb-f859542ec66b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "20b0204f-4d33-3965-8d35-8cce802f4efc",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
generalbytes	www.generalbytes.atlassian.net/wiki/spaces/ESD/pages/2885222430/Security+Incident+March+17-18th+2023
generalbytes	www.generalbytes.com/en/support/changelog
generalbytes	www.generalbytes.atlassian.net/wiki/spaces/ESD/pages/951418958/Update+CAS
twitter	www.twitter.com/generalbytes/status/1637192687160897537
web3isgoinggreat	www.web3isgoinggreat.com/single/general-bytes-crypto-atms-exploited-for-over-1-6-million
arstechnica	www.arstechnica.com/information-technology/2023/03/hackers-drain-bitcoin-atms-of-1-5-million-by-exploiting-0-day-bug/
bleepingcomputer	www.bleepingcomputer.com/news/security/general-bytes-bitcoin-atms-hacked-using-zero-day-15m-stolen/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-28725

03 Oct 2025 20:07Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.1

EPSS0.00819

SSVC