BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Norma...
7.5CVSS
7.3AI Score
0.001EPSS
Reflected XSS affects the βmodeβ parameter in the /admin functionality of the web application in versions <=2.0.44
6.1CVSS
6AI Score
0.001EPSS