SARA / Free Tools / KEV / CVE-2022-4980

CVE-2022-4980 on CISA KEV

General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's

CISA KEV — Actively Exploited

General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531

Vendor / Product
— / —
Added to KEV
—
BOD 22-01 due
—
Ransomware use
—
CVSS / EPSS
9.3 CRITICAL · EPSS 1.02%

01What CISA says about this vulnerability

General Bytes Crypto Application Server (CAS) beginning with version 20201208 prior to 20220531.38 (backport) and 20220725.22 (mainline) contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation / first-admin creation page and create a new administrative account remotely. By gaining admin…

02Required action — verbatim from CISA

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

03Notes & references

04SARA's analyst layer — why this matters

This vulnerability is currently on the CISA KEV list, which CISA only adds CVEs to when there is reliable evidence of active exploitation in the wild. For federal civilian agencies, BOD 22-01 requires remediation by the due date above. For everyone else, KEV is the strongest "patch immediately" signal you can get from public threat intel.

05Affected products (summary)

VendorProductVersions
General BytesCrypto Application Server (CAS)20201208, 20201208

06Detection

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

Programmatic KEV data?
SARA's API returns KEV, CVSS, EPSS + analyst summary in one call.
Read the API reference →
Full CVE detail → Search KEV →