{"id":"CVE-2022-40187","aliases":["EUVD-2022-43489","GHSA-7q22-vf3p-qvwp"],"status":"published","title":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service...","description":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00855,"percentile":0.5867,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2022-10-13T00:00:00Z","modified":"2026-06-17T05:01:04Z","products":[{"vendor":"bushnellgolf","product":"launch_pro_firmware"},{"vendor":"foresightsports","product":"gc3_launch_monitor_firmware"}],"references":[{"url":"https://wiki.eclipse.org/TCF","tags":["x_transferred","Third Party Advisory"]},{"url":"https://www.foresightsports.com/gc3","tags":["x_transferred","Product"]},{"url":"https://github.com/atredispartners/advisories/blob/master/ATREDIS-2022-0003.md","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.bushnellgolf.com/products/launch-monitors/launch-pro/","tags":["x_transferred","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40187"},{"url":"https://www.bushnellgolf.com/products/launch-monitors/launch-pro"},{"url":"https://github.com/advisories/GHSA-7q22-vf3p-qvwp"}],"sources":{"cve":[{"id":"CVE-2022-40187","description":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.","status":"published","published":"2022-10-13T00:00:00Z","modified":"2025-05-15T14:45:29.334Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-43489","description":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.","status":"published","published":"2022-10-13T00:00:00Z","modified":"2025-05-15T14:45:29Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:47.046718Z"}],"ghsa":[{"id":"GHSA-7q22-vf3p-qvwp","title":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service...","description":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.","status":"published","published":"2022-10-13T12:00:26Z","modified":"2025-05-15T15:32:11Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:02:18.372377Z"}],"nvd":[{"id":"CVE-2022-40187","description":"Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.","status":"published","published":"2022-10-13T01:15:19.617Z","modified":"2026-06-17T05:01:04.333Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:29.52424Z"}]}}