CVE-2022-4098 — Multiple Wiesemann&Theis products of the ComServer Series are prone to an authen

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arb

01What is this vulnerability?

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

02Affected products

Vendor	Product	Versions
Wiesemann & Theis	Com	Server ++ — 0
Wiesemann & Theis	Com	Server 20mA — 0
Wiesemann & Theis	Com	Server Highspeed 100BaseFX — 0
Wiesemann & Theis	Com	Server Highspeed 100BaseLX — 0
Wiesemann & Theis	Com	Server Highspeed 19" 1Port — 0
Wiesemann & Theis	Com	Server Highspeed 19" 4Port — 0
Wiesemann & Theis	Com	Server Highspeed Compact — 0
Wiesemann & Theis	Com	Server Highspeed Industry — 0
Wiesemann & Theis	Com	Server Highspeed Isolated — 0
Wiesemann & Theis	Com	Server Highspeed OEM — 0
Wiesemann & Theis	Com	Server Highspeed Office 1 Port — 0
Wiesemann & Theis	Com	Server Highspeed Office 4 Port — 0
Wiesemann & Theis	Com	Server Highspeed PoE — 0
Wiesemann & Theis	Com	Server LC — 0
Wiesemann & Theis	Com	Server PoE 3 x Isolated — 0
Wiesemann & Theis	Com	Server UL — 0

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

• Published: 2022-12-13T07:26:17.752Z
• Last modified: 2025-04-14T18:12:33.668Z

09References

• cert.vde.com — https://cert.vde.com/en/advisories/VDE-2022-057/