Vulnerabilities in CBC Group software