Wiesemann & Theis Com-Server 20ma
5 CVEs affecting Wiesemann & Theis Com-Server 20ma. Latest disclosed: 2025-04-28. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42785 | Critical | 9.8 | 2022-11-15 | Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the pas… |
CVE-2025-3200 | Critical | 9.1 | 2025-04-28 | An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between… |
CVE-2022-42787 | High | 8.8 | 2022-11-10 | Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker ca… |
CVE-2022-4098 | High | 8.0 | 2022-12-13 | Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the C… |
CVE-2022-42786 | Medium | 5.4 | 2022-11-10 | Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a craf… |