critical9.8
CVE-2022-42785
Multiple W&T products of the ComServer Series are prone to an authentication bypass.
Impact
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wut | At-Modem-Emulator Firmware | before 1.48 |
| Wut | Com-Server \+\+ Firmware | before 1.48 |
| Wut | Com-Server 20ma Firmware | before 1.48 |
| Wut | Com-Server Highspeed 100basefx Firmware | before 1.76 |
| Wut | Com-Server Highspeed 100baselx Firmware | before 1.76 |
| Wut | Com-Server Highspeed 19\" 1port Firmware | before 1.76 |
| Wut | Com-Server Highspeed 19\" 4port Firmware | before 1.76 |
| Wut | Com-Server Highspeed Compact Firmware | before 1.76 |
| Wut | Com-Server Highspeed Industry Firmware | before 1.76 |
| Wut | Com-Server Highspeed Isolated Firmware | before 1.76 |
| Wut | Com-Server Highspeed Oem Firmware | before 1.76 |
| Wut | Com-Server Highspeed Office 1port Firmware | before 1.76 |