Vendors / Wiesemann & Theis Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now Wiesemann & Theis records in CISA KEV No Wiesemann & Theis vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00363 · Published 2025-04-28 · Fixed in 1.60 CWE-327
Priority MEDIUM 44
Multiple W&T products of the ComServer Series are prone to an authentication bypass.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01209 · Published 2022-11-10 · Fixed in 1.48, 1.76 CWE-306
Priority MEDIUM 40
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00887 · Published 2022-11-10 · Fixed in 1.48, 1.76 CWE-330
Priority LOW 39
An unauthenticated remote attacker can get access without password protection to the affected device.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00372 · Published 2025-08-19 · No fix listed CWE-306
Priority LOW 36
A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-03-01 · No fix listed CWE-428
Priority LOW 35
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing.
CVSS 3.1 HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.00346 · Published 2022-12-13 · Fixed in 1.55, 1.78 CWE-290
Priority LOW 25
Multiple W&T Products of the ComServer Series are prone to an XSS attack.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0058 · Published 2022-11-10 · Fixed in 1.48, 1.76 CWE-79
Priority LOW 24
An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00289 · Published 2025-05-06 · Fixed in 3.79, 4.08 +1 CWE-79
Open these records in search → All records by CVSS severity
2 4 2 0 0
THREATIST.IORead the docs