Lucene search

K
cve[email protected]CVE-2022-42786
HistoryNov 10, 2022 - 12:15 p.m.

CVE-2022-42786

2022-11-1012:15:10
CWE-79
web.nvd.nist.gov
27
6
cve-2022-42786
w&t products
comserver series
xss attack
authenticated remote attacker
arbitrary web scripts
html
configuration webpage

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage

Affected configurations

NVD
Node
wutat-modem-emulator_firmwareRange<1.48
AND
wutat-modem-emulatorMatch-
Node
wutcom-server_\+\+_firmwareRange<1.48
AND
wutcom-server_\+\+Match-
Node
wutcom-server_20ma_firmwareRange<1.48
AND
wutcom-server_20maMatch-
Node
wutcom-server_highspeed_100basefx_firmwareRange<1.76
AND
wutcom-server_highspeed_100basefxMatch-
Node
wutcom-server_highspeed_100baselx_firmwareRange<1.76
AND
wutcom-server_highspeed_100baselxMatch-
Node
wutcom-server_highspeed_19\"_1port_firmwareRange<1.76
AND
wutcom-server_highspeed_19\"_1portMatch-
Node
wutcom-server_highspeed_19\"_4port_firmwareRange<1.76
AND
wutcom-server_highspeed_19\"_4portMatch-
Node
wutcom-server_highspeed_compact_firmwareRange<1.76
AND
wutcom-server_highspeed_compactMatch-
Node
wutcom-server_highspeed_industry_firmwareRange<1.76
AND
wutcom-server_highspeed_industryMatch-
Node
wutcom-server_highspeed_isolatedMatch-
AND
wutcom-server_highspeed_isolated_firmwareRange<1.76
Node
wutcom-server_highspeed_oemMatch-
AND
wutcom-server_highspeed_oem_firmwareRange<1.76
Node
wutcom-server_highspeed_office_1portMatch-
AND
wutcom-server_highspeed_office_1port_firmwareRange<1.76
Node
wutcom-server_highspeed_office_4portMatch-
AND
wutcom-server_highspeed_office_4port_firmwareRange<1.76
Node
wutcom-server_highspeed_poeMatch-
AND
wutcom-server_highspeed_poe_firmwareRange<1.76
Node
wutcom-server_highspeed_lcMatch-
AND
wutcom-server_highspeed_lc_firmwareRange<1.48
Node
wutcom-server_highspeed_ulMatch-
AND
wutcom-server_highspeed_ul_firmwareRange<1.48
Node
wutcom-server_highspeed_poe_3x_isolatedMatch-
AND
wutcom-server_highspeed_poe_3x_isolated_firmwareRange<1.48

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server LC",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server PoE 3 x Isolated",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server 20mA",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server ++",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AT-Modem-Emulator",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server UL",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.48",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed 100BaseFX",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed 100BaseLX",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed Office 1 Port",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed Office 4 Port",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed Industry",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed OEM",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed Compact",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed Isolated",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed 19\" 1Port",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed 19\" 4Port",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Com-Server Highspeed PoE",
    "vendor": "Wiesemann & Theis",
    "versions": [
      {
        "lessThan": "1.76",
        "status": "affected",
        "version": "1.0",
        "versionType": "semver"
      }
    ]
  }
]

Social References

More

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

Related for CVE-2022-42786