Com-Server UL vulnerabilities
4 known vulnerabilities in Com-Server UL from Wiesemann & Theis. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.1 Critical severity
Com-Server++: Use of a Broken or Risky Cryptographic Algorithm
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.
- 8.0 High severity
Com-Server ++: Authentication Bypass by Spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spo
- 9.8 Critical severity
Com-Server LC: Missing Authentication for Critical Functionality
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
- 8.8 High severity
Com-Server LC: Use of Insufficiently Random Values
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs