← Database
CVE-2022-4098
HIGH
CVSS: 8.0
Published: 2022-12-13
Modified: 2026-06-17
Description
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Affected Platforms
Wut Com-Server Highspeed CompactWut Com-Server Highspeed Oem FirmwareWut Com-Server Highspeed PoeWut Com-Server Highspeed Ul FirmwareWut Com-Server Highspeed 19\" 4Port FirmwareWut Com-Server Highspeed 19\" 4PortWut Com-Server Highspeed 100Baselx FirmwareWut Com-Server Highspeed OemWut Com-Server Highspeed 100Basefx FirmwareWut Com-Server \+\+