CVE-2005-2789: Bfcommand And Control Software Bfcc

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.

Affected products

• Bfcommand And Control Software Bfcc: up to and including 1.22_a
• Bfcommand And Control Software Bfvcc: version 2.00_a only; version 2.14_b only

Published 2005-09-02. Last modified 2026-06-16.