Wut vulnerabilities
We track 3 vulnerabilities in Wut products across 17 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 13, 2022.
Latest Wut vulnerabilities
- 8.0 High severity
Com-Server ++: Authentication Bypass by Spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spo
- 9.8 Critical severity
Com-Server LC: Missing Authentication for Critical Functionality
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
- 8.8 High severity
Com-Server LC: Use of Insufficiently Random Values
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs