Wiesemann & Theis: Multiple products prone to missing authentication through spoofing

8 CVSS

Vulnerability Description

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4098

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Wiesemann & Theis would like to thank Martin Weiß for responsibly disclosing this vulnerability.

References

https://cert.vde.com/en/advisories/VDE-2022-057/

More from Wiesemann & Theis

View All →

CVE-2025-41689

Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access

High 7.5

CVE-2025-3200

Com-Server Exposed via Weak TLS

Critical 9.1

CVE-2025-3020

Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting

Medium 5.4

CVE-2022-42787

Wiesemann & Theis: Small number space for allocating session id in Com-Server family

High 8.8

CVE-2022-42786

Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family

Medium 5.4

Affected Vendor

Wiesemann & Theis

View all reports →

Affected Software

Com-Server ++, Com-Server 20mA, Com-Server Highspeed 100BaseFX, Com-Server Highspeed 100BaseLX, Com-Server Highspeed 19" 1Port, Com-Server Highspeed 19" 4Port, Com-Server Highspeed Compact, Com-Server Highspeed Industry, Com-Server Highspeed Isolated, Com-Server Highspeed OEM, Com-Server Highspeed Office 1 Port, Com-Server Highspeed Office 4 Port, Com-Server Highspeed PoE, Com-Server LC, Com-Server PoE 3 x Isolated, Com-Server UL

Vulnerable Versions: