CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.

• CWE-276
• CWE-276

• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0003.mdExploit, Third Party Advisory
• https://wiki.eclipse.org/TCFThird Party Advisory
• https://www.bushnellgolf.com/products/launch-monitors/launch-pro/Product
• https://www.foresightsports.com/gc3Product
• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0003.mdExploit, Third Party Advisory
• https://wiki.eclipse.org/TCFThird Party Advisory
• https://www.bushnellgolf.com/products/launch-monitors/launch-pro/Product
• https://www.foresightsports.com/gc3Product

Published

Oct 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40180A vulnerability has been identified in Desigo PXM30-1 (All v…5.3
• CVE-2022-40181A vulnerability has been identified in Desigo PXM30-1 (All v…8.3
• CVE-2022-40182A vulnerability has been identified in Desigo PXM30-1 (All v…8.8
• CVE-2022-40183An error in the URL handler of the VIDEOJET multi 4000 may l…4.7
• CVE-2022-40184Incomplete filtering of JavaScript code in different configu…4.8
• CVE-2022-40186An issue was discovered in HashiCorp Vault and Vault Enterpr…9.1
• CVE-2022-40188Knot Resolver before 5.5.3 allows remote attackers to cause …7.5
• CVE-2022-40189Improper Neutralization of Special Elements used in an OS Co…9.8
• CVE-2022-4019A denial-of-service vulnerability in the Mattermost Playbook…6.5
• CVE-2022-40190SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable…9.6
• CVE-2022-40191Authenticated (subscriber+) Stored Cross-Site Scripting (XSS…5.4
• CVE-2022-40192Cross-Site Request Forgery (CSRF) vulnerability in wpForo Fo…8.8