CVE-2025-3200: Use of a Broken or Risky Cryptographic Algorithm

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-21288

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21272

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21272

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21288 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21288

Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21272 Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

Windows COM Server Information Disclosure Vulnerability

...

CVE-2025-21288: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

CVE-2025-21272: Use of Uninitialized Resource

Windows COM Server Information Disclosure Vulnerability...

PT-2025-1082

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue is related to the use of an uninitialized resource in the Windows COM Server, which can allow an attacker to gain unauthorized access to protected information. This is an...

PT-2025-4197

Name of the Vulnerable Software and Affected Versions Windows COM Server affected versions not specified Description The issue allows attackers to obtain sensitive information and affect the system. It is related to information disclosure. Recommendations At the moment, there is no information...

Wiesemann & Theis Com-Server Family security vulnerabilities

The Wiesemann & Theis Com-Server Family is a family of serial device servers from Wiesemann & Theis, Germany. A security vulnerability exists in the Wiesemann & Theis Com-Server Family that stems from the ease of bypassing authentication via IP spoofing, where an unauthenticated attacker on the...

Wiesemann & Theis Com-Server Family Access Control Vulnerability

The Wiesemann & Theis Com-Server Family is a family of serial device servers from Wiesemann & Theis, Germany. An access control error vulnerability exists in Wiesemann & Theis Com-Server Family. A remote attacker could exploit this vulnerability to log in to the system without knowing the passwor...

CVE-2022-42787 Wiesemann & Theis: Small number space for allocating session id in Com-Server family

Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be...

CVE-2022-42787 Wiesemann & Theis: Small number space for allocating session id in Com-Server family

Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be...

CVE-2022-42786 Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage...