Wiesemann & Theis: Authentication bypass in Com-Server family
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Com-Server LC
Vendor
Wiesemann & Theis
Product
Com-Server LC
Platforms
Unknown
Default status
unaffected
Com-Server LC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server PoE 3 x Isolated
Vendor
Wiesemann & Theis
Product
Com-Server PoE 3 x Isolated
Platforms
Unknown
Default status
unaffected
Com-Server PoE 3 x Isolated · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server 20mA
Vendor
Wiesemann & Theis
Product
Com-Server 20mA
Platforms
Unknown
Default status
unaffected
Com-Server 20mA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server ++
Vendor
Wiesemann & Theis
Product
Com-Server ++
Platforms
Unknown
Default status
unaffected
Com-Server ++ · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
AT-Modem-Emulator
Vendor
Wiesemann & Theis
Product
AT-Modem-Emulator
Platforms
Unknown
Default status
unaffected
AT-Modem-Emulator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server UL
Vendor
Wiesemann & Theis
Product
Com-Server UL
Platforms
Unknown
Default status
unaffected
Com-Server UL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server Highspeed 100BaseFX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseFX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseFX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 100BaseLX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseLX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseLX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Office 1 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 1 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 1 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Office 4 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 4 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 4 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Industry
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Industry
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Industry · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed OEM
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed OEM
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed OEM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Compact
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Compact
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Compact · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Isolated
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Isolated
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Isolated · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 19" 1Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 1Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 1Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 19" 4Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 4Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 4Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed PoE
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed PoE
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed PoE · Scoped product and version facts