PT-2022-26578 · W&T · W&T Comserver Series

Name of the Vulnerable Software and Affected Versions: W&T Comserver Series products affected versions not specified Description: The issue concerns the allocation of session IDs, which uses a small number space. This allows an unauthenticated remote attacker to brute force a user's session ID...

PT-2022-26577 · Unknown · Comserver Series

Name of the Vulnerable Software and Affected Versions: ComServer Series affected versions not specified Description: The issue allows an authenticated remote attacker to execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage. This is a...

PT-2022-26576 · Unknown · Comserver Series

Name of the Vulnerable Software and Affected Versions: ComServer Series affected versions not specified Description: The issue allows an unauthenticated remote attacker to bypass authentication and log in without knowledge of the password by crafting a modified HTTP GET Request. Recommendations: ...