Vulnerabilities

TI-2022-03746 CVE-2022-4098 · GHSA-9w34-3vc7-7786

Wiesemann & Theis: Multiple products prone to missing authentication through spoofing

LOW 35

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00346 Published 2022-12-13 Fixed in 1.55, 1.78 CWE-290

TI-2022-20804 CVE-2022-42787 · GHSA-qgc9-3m4w-r9w2

MEDIUM 40

Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00887 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-330

TI-2022-20803 CVE-2022-42786 · GHSA-ffmc-cj3h-9wwj

LOW 25

Multiple W&T Products of the ComServer Series are prone to an XSS attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0058 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-79

TI-2022-20802 CVE-2022-42785 · GHSA-pvg6-pm5h-p2q2

MEDIUM 44

Multiple W&T products of the ComServer Series are prone to an authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01209 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-306