Wiesemann & Theis: Small number space for allocating session id in Com-Server family
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Com-Server LC
Vendor
Wiesemann & Theis
Product
Com-Server LC
Platforms
Unknown
Default status
unaffected
Com-Server LC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server PoE 3 x Isolated
Vendor
Wiesemann & Theis
Product
Com-Server PoE 3 x Isolated
Platforms
Unknown
Default status
unaffected
Com-Server PoE 3 x Isolated · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server 20mA
Vendor
Wiesemann & Theis
Product
Com-Server 20mA
Platforms
Unknown
Default status
unaffected
Com-Server 20mA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server ++
Vendor
Wiesemann & Theis
Product
Com-Server ++
Platforms
Unknown
Default status
unaffected
Com-Server ++ · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
AT-Modem-Emulator
Vendor
Wiesemann & Theis
Product
AT-Modem-Emulator
Platforms
Unknown
Default status
unaffected
AT-Modem-Emulator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server UL
Vendor
Wiesemann & Theis
Product
Com-Server UL
Platforms
Unknown
Default status
unaffected
Com-Server UL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.48
Unavailable
None listed
Com-Server Highspeed 100BaseFX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseFX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseFX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 100BaseLX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseLX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseLX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Office 1 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 1 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 1 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Office 4 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 4 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 4 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Industry
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Industry
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Industry · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed OEM
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed OEM
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed OEM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Compact
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Compact
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Compact · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed Isolated
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Isolated
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Isolated · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 19" 1Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 1Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 1Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed 19" 4Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 4Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 4Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
semver
1.76
Unavailable
None listed
Com-Server Highspeed PoE
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed PoE
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed PoE · Scoped product and version facts