← Database

CVE-2022-42785

CRITICAL CVSS: 9.8 Published: 2022-11-15 Modified: 2026-06-17

Description

Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.

Affected Platforms

Wut Com-Server Highspeed CompactWut Com-Server Highspeed Oem FirmwareWut Com-Server Highspeed PoeWut At-Modem-EmulatorWut Com-Server Highspeed Ul FirmwareWut Com-Server Highspeed 19\" 4Port FirmwareWut Com-Server Highspeed 19\" 4PortWut Com-Server Highspeed 100Baselx FirmwareWut Com-Server Highspeed OemWut Com-Server Highspeed 100Basefx Firmware

Weakness Type

CWE-306

References