CVE-2022-42786: Wut At-Modem-Emulator Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage

Affected products

• Wut At-Modem-Emulator Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server ++ Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server 20ma Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed 100basefx Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 100baselx Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 19" 1port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed 19" 4port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Compact Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Industry Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Isolated Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Lc Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed Oem Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Office 1port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Office 4port Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Poe 3x Isolated Firmware: before 1.48 (fixed in 1.48)
• Wut Com-Server Highspeed Poe Firmware: before 1.76 (fixed in 1.76)
• Wut Com-Server Highspeed Ul Firmware: before 1.48 (fixed in 1.48)

Published 2022-11-10. Last modified 2026-06-17.