Wipotec ComScale Security Vulnerability

Wipotec ComScale is an application from Wipotec. It can display collected data on a connected PC or tablet device. A security vulnerability exists in Wipotec ComScale version v4.3.29.21344, v4.4.12.723. An attacker exploits the vulnerability to log in as any user without a password...

CVE-2023-45912: Exposure of Sensitive Information to an Unauthorized Actor

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings...

CVE-2023-45912

WIPOTEC ComScale versions 4.3.29.21344 and 4.4.12.723 fail to validate user sessions, allowing unauthenticated attackers to read files from the OS and obtain directory listings. Affects ComScale software; root cause is session validation failure. Potential impact: information disclosure (high). P...

PT-2023-29764 · Wipotec Gmbh · Comscale

Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: An issue in WIPOTEC GmbH ComScale allows unauthenticated attackers to login as any user without a password. Recommendations: For versions 4.3.29.21344 and 4.4.12.723,...