medium5.4
CVE-2022-42786
Multiple W&T Products of the ComServer Series are prone to an XSS attack.
Impact
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wut | At-Modem-Emulator Firmware | before 1.48 |
| Wut | Com-Server \+\+ Firmware | before 1.48 |
| Wut | Com-Server 20ma Firmware | before 1.48 |
| Wut | Com-Server Highspeed 100basefx Firmware | before 1.76 |
| Wut | Com-Server Highspeed 100baselx Firmware | before 1.76 |
| Wut | Com-Server Highspeed 19\" 1port Firmware | before 1.76 |
| Wut | Com-Server Highspeed 19\" 4port Firmware | before 1.76 |
| Wut | Com-Server Highspeed Compact Firmware | before 1.76 |
| Wut | Com-Server Highspeed Industry Firmware | before 1.76 |
| Wut | Com-Server Highspeed Isolated Firmware | before 1.76 |
| Wut | Com-Server Highspeed Oem Firmware | before 1.76 |
| Wut | Com-Server Highspeed Office 1port Firmware | before 1.76 |