CVE:CVE-2022-42785
CNNVD:CNNVD-202211-2879
Wiesemann & Theis Com-Server Family是德国Wiesemann & Theis公司的一系列串行设备服务器。
Wiesemann & Theis Com-Server Family 存在访问控制错误漏洞。远程攻击者利用该漏洞可以通过修改HTTP GET请求在不知道密码的情况下登录系统。
solution:Upgrade wut at-modem-emulator_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_++_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_20ma_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_100basefx_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_100baselx_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_19"_1port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_19"_4port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_compact_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_industry_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_isolated_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_oem_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_office_1port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_office_4port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_poe_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_lc_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_ul_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_poe_3x_isolated_firmware to a higher version than 1.48,and avoid the version (,1.48)