Com-server Highspeed Poe 3x Isolated Firmware vulnerabilities
3 known vulnerabilities in Com-server Highspeed Poe 3x Isolated Firmware from Wut. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
Com-Server ++: Authentication Bypass by Spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spo
- 9.8 Critical severity
Com-Server LC: Missing Authentication for Critical Functionality
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
- 8.8 High severity
Com-Server LC: Use of Insufficiently Random Values
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs