CVE-2022-42785

Wiesemann & Theis: Authentication bypass in Com-Server family

Published Nov 10, 2022 CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Description
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-45848 Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
May 1, 2025, 7:02 PM
Reserved
Oct 11, 2022, 1:32 PM
Status
Modified
Published
Nov 15, 2022, 9:15 PM
Modified
Jun 17, 2026, 5:05 AM