Vulnerabilities

TI-2023-24657 CVE-2023-45912 · GHSA-p7jx-m4x8-cghf

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions…

HIGH 72

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2023-10-18 No fix listed CWE-200

TI-2023-24656 CVE-2023-45911 · GHSA-7jrw-mp94-7v28

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated…

MEDIUM 51

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00981 Published 2023-10-18 No fix listed CWE-668

Vulnerabilities

Filters

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions…

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated…