Wut At-Modem-Emulator Firmware vulnerabilities

3 CVEs affecting Wut At-Modem-Emulator Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-42785, published 2022-11-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-42785, published 2022-11-15. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET…
CVE-2022-42787, published 2022-11-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and…
CVE-2022-42786, published 2022-11-10. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of…