Lucene search
+L
WipotecComscale

2 matches found

CVE
CVE
added 2023/10/18 12:0 a.m.62 views

CVE-2023-45911

The CVE-2023-45911 entry concerns WIPOTEC GmbH ComScale versions 4.3.29.21344 to 4.4.12.723, where an authentication bypass allows unauthenticated attackers to log in as any user without a password. The issue is a login-access control vulnerability (no password required) that impacts network-expo...

9.8CVSS9.3AI score0.0082EPSS
Save
CVE
CVE
added 2023/10/18 12:0 a.m.52 views

CVE-2023-45912

WIPOTEC ComScale versions 4.3.29.21344 and 4.4.12.723 fail to validate user sessions, allowing unauthenticated attackers to read files from the OS and obtain directory listings. Affects ComScale software; root cause is session validation failure. Potential impact: information disclosure (high). P...

7.5CVSS7.4AI score0.00638EPSS
Save