CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-42785
Critical (9.8) in wut. EPSS 1.1% chance of exploitation in the next 30 days.
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wut:at-modem-emulator_firmware
- wut:com-server_20ma_firmware
- wut:com-server_\+\+_firmware
- wut:com-server_highspeed_100basefx_firmware
- wut:com-server_highspeed_100baselx_firmware
- wut:com-server_highspeed_19\"_1port_firmware
- wut:com-server_highspeed_19\"_4port_firmware
- wut:com-server_highspeed_compact_firmware
- wut:com-server_highspeed_industry_firmware
- wut:com-server_highspeed_isolated_firmware
- wut:com-server_highspeed_lc_firmware
- wut:com-server_highspeed_oem_firmware
- wut:com-server_highspeed_office_1port_firmware
- wut:com-server_highspeed_office_4port_firmware
- wut:com-server_highspeed_poe_3x_isolated_firmware
- wut:com-server_highspeed_poe_firmware
- wut:com-server_highspeed_ul_firmware