{"id":"CVE-2022-42787","state":"PUBLISHED","title":"Wiesemann & Theis: Small number space for allocating session id in Com-Server family","description":"Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.","publishedAt":"2022-11-10T11:06:20.856Z","updatedAt":"2025-05-01T19:01:20.740Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CERTVDE"},"assigner":"CERTVDE","products":["Wiesemann & Theis Com-Server LC","Wiesemann & Theis Com-Server PoE 3 x Isolated","Wiesemann & Theis Com-Server 20mA","Wiesemann & Theis Com-Server ++","Wiesemann & Theis AT-Modem-Emulator","Wiesemann & Theis Com-Server UL","Wiesemann & Theis Com-Server Highspeed 100BaseFX","Wiesemann & Theis Com-Server Highspeed 100BaseLX","Wiesemann & Theis Com-Server Highspeed Office 1 Port","Wiesemann & Theis Com-Server Highspeed Office 4 Port","Wiesemann & Theis Com-Server Highspeed Industry","Wiesemann & Theis Com-Server Highspeed OEM","Wiesemann & Theis Com-Server Highspeed Compact","Wiesemann & Theis Com-Server Highspeed Isolated","Wiesemann & Theis Com-Server Highspeed 19\" 1Port","Wiesemann & Theis Com-Server Highspeed 19\" 4Port","Wiesemann & Theis Com-Server Highspeed PoE"],"affected":[{"vendor":"Wiesemann & Theis","product":"Com-Server LC","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server PoE 3 x Isolated","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server 20mA","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server ++","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"AT-Modem-Emulator","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server UL","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 100BaseFX","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 100BaseLX","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Office 1 Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Office 4 Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Industry","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed OEM","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Compact","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Isolated","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 19\" 1Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 19\" 4Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed PoE","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]}],"references":["https://cert.vde.com/de/advisories/VDE-2022-043"],"weaknesses":["CWE-330"],"ingestedAt":"2026-10-29T19:50:40.706Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/42xxx/CVE-2022-42787.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-42787","state":"PUBLISHED","datePublished":"2022-11-10T11:06:20.856Z","dateUpdated":"2025-05-01T19:01:20.740Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","requesterUserId":"a1e5283b-8f0d-401e-98b2-bc6219c0e8d1","dateReserved":"2022-10-11T13:32:19.672Z"},"containers":{"cna":{"title":"Wiesemann & Theis: Small number space for allocating session id in Com-Server family","descriptions":[{"lang":"en","value":"Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required."}],"affected":[{"vendor":"Wiesemann & Theis","product":"Com-Server LC","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server PoE 3 x Isolated","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server 20mA","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server ++","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"AT-Modem-Emulator","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server UL","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.48","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 100BaseFX","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 100BaseLX","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Office 1 Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Office 4 Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Industry","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed OEM","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Compact","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed Isolated","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 19\" 1Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed 19\" 4Port","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]},{"vendor":"Wiesemann & Theis","product":"Com-Server Highspeed PoE","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.76","versionType":"semver"}]}],"references":[{"url":"https://cert.vde.com/de/advisories/VDE-2022-043"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-330","description":"CWE-330 Use of Insufficiently Random Values","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2022-12-01T13:56:46.185Z"},"datePublic":"2022-11-07T10:00:00.000Z","impacts":[{"capecId":"CAPEC-112","descriptions":[{"lang":"en","value":"CAPEC-112 Brute Force"}]}],"source":{"advisory":"VDE-2022-043","defect":["CERT@VDE#64257"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert.vde.com/de/advisories/VDE-2022-043","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T13:19:04.509Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-01T19:01:02.435905Z","id":"CVE-2022-42787","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-01T19:01:20.740Z"}}]}}}