HIGH🇵🇱 Wersja polska

CVE-2023-45912

CVSS 7.5v3.1pub. 2023-10-18upd. 2025-01-09

WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Wipotec Comscale

    APP
    Wipotec
    4.3.29.213444.4.12.723
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-45911CRITICAL9.8ten sam produkt

An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as a...