PT-2022-25649 · Wiesemann&Theis · Wiesemann&Theis Comserver Series

Martin Weiß · Published 2022-12-13 · Updated 2023-03-31 · CVE-2022-4098

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wiesemann&Theis ComServer Series (affected versions not specified)

Description The issue allows an unauthenticated attacker in the same subnet to bypass authentication through IP spoofing. After a user logs in to the WBM of the Com-Server, the attacker can obtain the session ID. By crafting modified HTTP Get requests, the attacker can change arbitrary settings, potentially resulting in a complete takeover of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2022-4098

Affected Products

Wiesemann&Theis Comserver Series

References · 4

• https://cert.vde.com/en/advisories/VDE-2022-057 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4098 · Security Note
• https://t.me/cibsecurity/54385 · Telegram Post