Wiesemann & Theis multiple products prone to web interface vulnerability

Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.


CVE-2022-4098: 7.1

Wiesemann &Theis: Multiple Vulnerabilities in the Com-Server Family

Multiple Wiesemann & Theis product families are affected by multiple vulnerabilities in the web interface.


CVE-2022-42787: 9.8
CVE-2022-42785: 9.8
CVE-2022-42786: 5.4

Feeds

By Vendor

Archive

2023
2022
2021
2020
2019
2018
2017

Legend

(Scoring for CVSS 2.0,3.0+3.1)
None
No CVE available
Low
0.1 <= 3.9
Medium
4.0 <= 6.9
High
7.0 <= 8.9
Critical
9.0 <= 10.0