Skip to content
OpenAdvisories

Product · Wiesemann & Theis

Com-Server++

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.0
    CVE-2022-4098

    Wiesemann & Theis: Multiple products prone to missing authentication through spoofing

    Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP sp…

    Wiesemann & Theis Com-Server 20mA Com-Server++ Com-Server UL
  • High 8.8
    CVE-2022-42787

    Wiesemann & Theis: Small number space for allocating session id in Com-Server family

    Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user need…

    Wiesemann & Theis Com-Server 20mA Com-Server++ Com-Server UL