Description
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
Published: 2022-11-10
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-45849 Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
History

Tue, 29 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Wut At-modem-emulator At-modem-emulator Firmware Com-server 20ma Com-server 20ma Firmware Com-server \+\+ Com-server \+\+ Firmware Com-server Highspeed 100basefx Com-server Highspeed 100basefx Firmware Com-server Highspeed 100baselx Com-server Highspeed 100baselx Firmware Com-server Highspeed 19\" 1port Com-server Highspeed 19\" 1port Firmware Com-server Highspeed 19\" 4port Com-server Highspeed 19\" 4port Firmware Com-server Highspeed Compact Com-server Highspeed Compact Firmware Com-server Highspeed Industry Com-server Highspeed Industry Firmware Com-server Highspeed Isolated Com-server Highspeed Isolated Firmware Com-server Highspeed Lc Com-server Highspeed Lc Firmware Com-server Highspeed Oem Com-server Highspeed Oem Firmware Com-server Highspeed Office 1port Com-server Highspeed Office 1port Firmware Com-server Highspeed Office 4port Com-server Highspeed Office 4port Firmware Com-server Highspeed Poe Com-server Highspeed Poe 3x Isolated Com-server Highspeed Poe 3x Isolated Firmware Com-server Highspeed Poe Firmware Com-server Highspeed Ul Com-server Highspeed Ul Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2025-04-29T14:56:50.373Z

Reserved: 2022-10-11T13:32:19.672Z

Link: CVE-2022-42786

cve-icon Vulnrichment

Updated: 2024-08-03T13:19:04.411Z

cve-icon NVD

Status : Modified

Published: 2022-11-10T12:15:10.063

Modified: 2024-11-21T07:25:20.490

Link: CVE-2022-42786

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses