{"vulnerability": "CVE-2022-42982", "sightings": [{"uuid": "22fa7ce2-bc34-4155-87f7-6f357a94565a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-42982", "type": "seen", "source": "https://t.me/cibsecurity/53050", "content": "\u203c CVE-2022-42982 \u203c\n\nBKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Normally, only authenticated streaming data will be provided over UDP and not the sourcetable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T15:58:43.000000Z"}, {"uuid": "a8d6e2f1-d766-42af-a52b-a756970a148a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-42982", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-42982\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP sourcetable is typically quite long (tens of kBs) and can be requested with a packet of only 30 bytes. This presents a vector that can be used for UDP amplification attacks. Normally, only authenticated streaming data will be provided over UDP and not the sourcetable.\n\ud83d\udccf Published: 2022-11-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T13:55:22.894Z\n\ud83d\udd17 References:\n1. https://cve.mahi.be/bkg_ntrip_udp/\n2. https://igs.bkg.bund.de/ntrip/bkgcaster", "creation_timestamp": "2025-04-30T14:13:12.000000Z"}]}