https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:48:36.363776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-42787 CVE-2022-42787 — Wiesemann & Theis: Small number space for allocating session id in Com-Server family 2026-10-06T18:48:36.365903+00:00

Affected: Wiesemann & Theis Com-Server LC, Wiesemann & Theis Com-Server PoE 3 x Isolated, Wiesemann & Theis Com-Server 20mA, Wiesemann & Theis Com-Server ++, Wiesemann & Theis AT-Modem-Emulator, Wiesemann & Theis Com-Server UL, Wiesemann & Theis Com-Server Highspeed 100BaseFX, Wiesemann & Theis Com-Server Highspeed 100BaseLX, Wiesemann & Theis Com-Server Highspeed Office 1 Port, Wiesemann & Theis Com-Server Highspeed Office 4 Port and 7 more

Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.