CVE-2022-42787 json
Wiesemann & Theis: Small number space for allocating session id in Com-Server family
published 2022-11-10 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-45850
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 59%
- public exploits
- 0
- none known
Summary
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.
Patch / fix
- Wiesemann & Theis Com-Server LC 1.48
- Wiesemann & Theis Com-Server PoE 3 x Isolated 1.48
- Wiesemann & Theis Com-Server 20mA 1.48
- Wiesemann & Theis Com-Server ++ 1.48
- Wiesemann & Theis AT-Modem-Emulator 1.48
- Wiesemann & Theis Com-Server UL 1.48
- Wiesemann & Theis Com-Server Highspeed 100BaseFX 1.76
- Wiesemann & Theis Com-Server Highspeed 100BaseLX 1.76
- Wiesemann & Theis Com-Server Highspeed Office 1 Port 1.76
- Wiesemann & Theis Com-Server Highspeed Office 4 Port 1.76
- Wiesemann & Theis Com-Server Highspeed Industry 1.76
- Wiesemann & Theis Com-Server Highspeed OEM 1.76
- Wiesemann & Theis Com-Server Highspeed Compact 1.76
- Wiesemann & Theis Com-Server Highspeed Isolated 1.76
- Wiesemann & Theis Com-Server Highspeed 19" 1Port 1.76
- Wiesemann & Theis Com-Server Highspeed 19" 4Port 1.76
- Wiesemann & Theis Com-Server Highspeed PoE 1.76
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 18 mo ago
Exploit prediction
0.89% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
- Wiesemann & Theis Com-Server LC
- Wiesemann & Theis Com-Server PoE 3 x Isolated
- Wiesemann & Theis Com-Server 20mA
- Wiesemann & Theis Com-Server ++
- Wiesemann & Theis AT-Modem-Emulator
- Wiesemann & Theis Com-Server UL
- Wiesemann & Theis Com-Server Highspeed 100BaseFX
- Wiesemann & Theis Com-Server Highspeed 100BaseLX
- Wiesemann & Theis Com-Server Highspeed Office 1 Port
- Wiesemann & Theis Com-Server Highspeed Office 4 Port
- Wiesemann & Theis Com-Server Highspeed Industry
- Wiesemann & Theis Com-Server Highspeed OEM
- Wiesemann & Theis Com-Server Highspeed Compact
- Wiesemann & Theis Com-Server Highspeed Isolated
- Wiesemann & Theis Com-Server Highspeed 19" 1Port
- Wiesemann & Theis Com-Server Highspeed 19" 4Port
- Wiesemann & Theis Com-Server Highspeed PoE
Classification
- Weakness
-
- CWE-330 Use of Insufficiently Random Values
References
-
cert.vde.com
/de/advisories/VDE-2022-043
vendor-advisory
Sources
- CVE List CVE-2022-42787
- NVD CVE-2022-42787
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.