CVE-2022-4098

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

• wut com-server \+\+ firmware (< 1.55) • wut com-server 20ma firmware (< 1.55) • wut com-server highspeed 100basefx firmware (< 1.78) • wut com-server highspeed 100baselx firmware (< 1.78) • wut com-server highspeed 19\" 1port firmware (< 1.78) • wut com-server highspeed 19\" 4port firmware (< 1.78) • wut com-server highspeed compact firmware (< 1.78) • wut com-server highspeed industry firmware (< 1.78) • wut com-server highspeed isolated firmware (< 1.78) • wut com-server highspeed oem firmware (< 1.78) • wut com-server highspeed office 1port firmware (< 1.78) • wut com-server highspeed office 4port firmware (< 1.78) • wut com-server highspeed poe firmware (< 1.78) • wut com-server highspeed lc firmware (< 1.55) • wut com-server highspeed poe 3x isolated firmware (< 1.55) • wut com-server highspeed ul firmware (< 1.55)