Vulnerabilities

TI-2022-20804 CVE-2022-42787 · GHSA-qgc9-3m4w-r9w2

Wiesemann & Theis: Small number space for allocating session id in Com-Server family

MEDIUM 40

Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00887 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-330

TI-2022-20803 CVE-2022-42786 · GHSA-ffmc-cj3h-9wwj

LOW 25

Multiple W&T Products of the ComServer Series are prone to an XSS attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0058 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-79

TI-2022-20802 CVE-2022-42785 · GHSA-pvg6-pm5h-p2q2

MEDIUM 44

Multiple W&T products of the ComServer Series are prone to an authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01209 Published 2022-11-10 Fixed in 1.48, 1.76 CWE-306