Description
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wiesemann & Theis | Com-Server ++ | < 1.55 | 1.55 |
| Wiesemann & Theis | Com-Server 20mA | < 1.55 | 1.55 |
| Wiesemann & Theis | Com-Server Highspeed 100BaseFX | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed 100BaseLX | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed 19" 1Port | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed 19" 4Port | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed Compact | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed Industry | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed Isolated | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed OEM | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed Office 1 Port | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed Office 4 Port | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server Highspeed PoE | < 1.78 | 1.78 |
| Wiesemann & Theis | Com-Server LC | < 1.55 | 1.55 |
| Wiesemann & Theis | Com-Server PoE 3 x Isolated | < 1.55 | 1.55 |
| Wiesemann & Theis | Com-Server UL | < 1.55 | 1.55 |
Advisories 1
- VDE-2022-057 Wiesemann & Theis multiple products prone to web interface vulnerability CERT@VDE · May 14, 2025