Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-42786

Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wiesemann & Theis Com-Server LC

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis Com-Server PoE 3 x Isolated

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis Com-Server 20mA

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis Com-Server ++

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis AT-Modem-Emulator

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis Com-Server UL

Default version status: unaffected

  • 1.0 to < 1.48affected

Wiesemann & Theis Com-Server Highspeed 100BaseFX

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed 100BaseLX

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed Office 1 Port

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed Office 4 Port

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed Industry

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed OEM

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed Compact

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed Isolated

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed 19" 1Port

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed 19" 4Port

Default version status: unaffected

  • 1.0 to < 1.76affected

Wiesemann & Theis Com-Server Highspeed PoE

Default version status: unaffected

  • 1.0 to < 1.76affected

References