high8.0
CVE-2022-4098
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing.
Impact
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wut | Com-Server \+\+ Firmware | before 1.55 |
| Wut | Com-Server 20ma Firmware | before 1.55 |
| Wut | Com-Server Highspeed 100basefx Firmware | before 1.78 |
| Wut | Com-Server Highspeed 100baselx Firmware | before 1.78 |
| Wut | Com-Server Highspeed 19\" 1port Firmware | before 1.78 |
| Wut | Com-Server Highspeed 19\" 4port Firmware | before 1.78 |
| Wut | Com-Server Highspeed Compact Firmware | before 1.78 |
| Wut | Com-Server Highspeed Industry Firmware | before 1.78 |
| Wut | Com-Server Highspeed Isolated Firmware | before 1.78 |
| Wut | Com-Server Highspeed Oem Firmware | before 1.78 |
| Wut | Com-Server Highspeed Office 1port Firmware | before 1.78 |
| Wut | Com-Server Highspeed Office 4port Firmware | before 1.78 |