Advisories
Understanding risks. Taking measures.
This page gives an overview of security advisories with their corresponding Common Vulnerabilities and Exposures (CVE) identifiers as published by BDO Cyber Security GmbH.
Sometimes the National Institute of Standards and Technology (NIST) assigns a different CVSS base score after analysis. Therefore, both, the base score as given by NIST and listed in the National Vulnerability Database (NVD) as well as the base score given by BDO Cyber Security GmbH are listed here.
In case of any questions, feel free to contact us.
CVE ID | Title | Severity (Base Score) | Advisory Link |
| CVE-2022-30334 | Information Disclosure in Brave Browser < 1.34 | NVD: CVSS 3.1 5.3 Medium | https://www.bdosecurity.de/de-de/advisories/cve-2022-30334 |
| CVE-2023-1818 | Use-After-Free in Google Chrome Browser < 112.0.5615.49 | NVD: CVSS 3.1 8.8 High | https://www.bdosecurity.de/de-de/advisories/cve-2023-1818 |
| CVE-2024-29862 | Improper Access Control: Partial Firewall Bypass (TCP) in chirpstack-mqtt-forwarder < v4.2.1 and chirpstack-gateway-bridge < v4.0.11 | NVD: Awaiting Analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-29862 |
| CVE-2024-39226 | OS Command Injection in Various GL.INet Devices | NVD: CVSS 3.1 9.8 Critical | https://www.bdosecurity.de/de-de/advisories/cve-2024-39226 |
| CVE-2024-39227 | Missing Access Controls and Path Traversal in various GL.INet Devices | NVD: CVSS 3.1 9.8 Critical | https://www.bdosecurity.de/de-de/advisories/cve-2024-39227 |
| CVE-2024-39228 | OS Command Injection in Various GL.INet Devices | NVD: CVSS 3.1 9.8 Critical | https://www.bdosecurity.de/de-de/advisories/cve-2024-39228 |
| CVE-2024-33109 | Directory Traversal in Ergophone/Tiptel IP 286 and Yealink SIP-T28P IP Phones | NVD: CVSS 3.1 9.8 Critial | https://www.bdosecurity.de/de-de/advisories/cve-2024-33109 |
| CVE-2024-32384 | Missing Support for HTTPS in Kerlink Gateways | NVD: Waiting for Analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32384 |
| CVE-2024-32388 | Improper Access Control: Partial Firewall Bypass (UDP) in Kerlink Gateways | NVD: Waiting for Analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32388 |
| CVE-2024-39148 | OS Command Injection via wmp-agent in Kerlink Gateways | NVD: Waiting for Analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-39148 |
| Insufficient URL Validation in the GlobaLeaks User Support API | NVD: CVSS 3.1 4.3 Medium BDO: CVSS 3.1 4.3 Medium | https://www.bdosecurity.de/de-de/advisories/cve-2026-33284 |
| CVE-2024-32385 | Information Disclosure via mDNS in KerOS 4.3.3 and Below | NVD: Awaiting analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32385 |
| CVE-2024-32386 | Path Traversal and Improper Update Package Validation in SNMP Update Mechanism Allows Arbitrary File Overwrite in KerOS 4.3.3 and Below | NVD: Awaiting analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32386 |
| CVE-2024-32387 | Predictable SNMP Community String in KerOS 4.3.3 and Below | NVD: Awaiting analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32387 |
| CVE-2024-32389 | Improper URL Handling in SNMP Update Mechanism Leads to Memory Corruption in KerOS 4.3.3 and Below | NVD: Awaiting analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-32389 |
| CVE-2024-34268 | Insufficient Authentication Check for Bluetooth Connection for EQ-3/Eqiva CC-RTE-BLE/Bluetooth Smart Radiator Thermostat in Firmware 1.46 and Below | NVD: Awaiting analysis | https://www.bdosecurity.de/de-de/advisories/cve-2024-34268 |
| CVE-2026-25657 | Improper Handling of Syntactically Invalid Structures in Ericsson Packet Core Gateway (PCG) prior to 1.30 | NVD: CVSS:3.1 6.5 Medium | https://www.bdosecurity.de/de-de/advisories/cve-2026-25657 |
| CVE-2026-25658 | Improper Handling of Missing Values in Ericsson Packet Core Gateway (PCG) Versions Prior to 1.30 | NVD: CVSS:3.1 6.5 Medium | https://www.bdosecurity.de/de-de/advisories/cve-2026-25658 |
| CVE-2026-25659 | Improper Handling of Missing Values in Ericsson Packet Core Gateway (PCG) Versions Prior to 1.30 | NVD: CVSS:3.1 6.5 Medium | https://www.bdosecurity.de/de-de/advisories/cve-2026-25659 |