Wut Com-Server Highspeed Poe 3x Isolated Firmware vulnerabilities

4 CVEs affecting Wut Com-Server Highspeed Poe 3x Isolated Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-4098, published 2022-12-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-42785, published 2022-11-15. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET…
CVE-2022-42787, published 2022-11-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and…
CVE-2022-42786, published 2022-11-10. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of…
CVE-2022-4098, published 2022-12-13. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in…