CVE:CVE-2022-42786
CNNVD:CNNVD-202211-2519
Wiesemann & Theis Com-Server Family是德国Wiesemann & Theis公司的一系列串行设备服务器。
Wiesemann & Theis Com-Server Family 存在跨站脚本漏洞。攻击者利用该漏洞通过注入配置网页标题的特制有效载荷来执行任意web脚本或HTML。
solution:Upgrade wut at-modem-emulator_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_++_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_20ma_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_100basefx_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_100baselx_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_19"_1port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_19"_4port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_compact_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_industry_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_isolated_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_oem_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_office_1port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_office_4port_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_poe_firmware to a higher version than 1.76,and avoid the version (,1.76); Upgrade wut com-server_highspeed_lc_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_ul_firmware to a higher version than 1.48,and avoid the version (,1.48); Upgrade wut com-server_highspeed_poe_3x_isolated_firmware to a higher version than 1.48,and avoid the version (,1.48)