Advisories · Technology
fbeta-GmbH ePA3-Service-OpenSource.
Every CVE that names fbeta-GmbH ePA3-Service-OpenSource among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
- fbeta-GmbH ePA3-Service-OpenSource
- CWE-323
- CVSS 7.5 High
ePA 3.x Integration: TLS Certificate Verification Universally Disabled
- fbeta-GmbH ePA3-Service-OpenSource
- Weak cryptography or TLS
- CVSS 9.1 CriticalCritical · CVSS 9+
ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust
- fbeta-GmbH ePA3-Service-OpenSource
- Weak cryptography or TLS
- CVSS 6.8 Medium
ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests
- fbeta-GmbH ePA3-Service-OpenSource
- Other injection