Authentication flaw

2022-11-1521:15:00

PRIOn knowledge base

www.prio-n.com

authentication flaw

remote attacker

http get request

comserver series

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.

CPENameOperatorVersion
at-modem-emulator_firmwarelt1.48
com-server_20ma_firmwarelt1.48
com-server_\\+\\+_firmwarelt1.48
com-server_highspeed_100basefx_firmwarelt1.76
com-server_highspeed_100baselx_firmwarelt1.76
com-server_highspeed_19\\'_1port_firmwarelt1.76
com-server_highspeed_19\\'_4port_firmwarelt1.76
com-server_highspeed_compact_firmwarelt1.76
com-server_highspeed_industry_firmwarelt1.76
com-server_highspeed_isolated_firmwarelt1.76

Name	Operator	Version
at-modem-emulator_firmware	lt	1.48
com-server_20ma_firmware	lt	1.48
com-server_\\+\\+_firmware	lt	1.48
com-server_highspeed_100basefx_firmware	lt	1.76
com-server_highspeed_100baselx_firmware	lt	1.76
com-server_highspeed_19\\'_1port_firmware	lt	1.76
com-server_highspeed_19\\'_4port_firmware	lt	1.76
com-server_highspeed_compact_firmware	lt	1.76
com-server_highspeed_industry_firmware	lt	1.76
com-server_highspeed_isolated_firmware	lt	1.76

Rows per page:

1-10 of 171

References

cert.vde.com/de/advisories/VDE-2022-043/