CVE-2022-42785: Wut At-Modem-Emulator Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.

Affected products

• Wut At-Modem-Emulator Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server ++ Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server 20ma Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed 100basefx Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 100baselx Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 19" 1port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 19" 4port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Compact Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Industry Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Isolated Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Lc Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed Oem Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Office 1port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Office 4port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Poe 3x Isolated Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed Poe Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Ul Firmware: before 1.48 (fixed in 1.48)

Published 2022-11-15. Last modified 2026-06-17.