CVE-2022-4098: Wiesemann & Theis Com-Server ++, заобикаляне на вход и

Описание

Оригинално описание

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

Засегнати продукти

• Wiesemann & Theis Com-Server ++: преди 1.55
• Wiesemann & Theis Com-Server 20mA: преди 1.55
• Wiesemann & Theis Com-Server Highspeed 100BaseFX: преди 1.78
• Wiesemann & Theis Com-Server Highspeed 100BaseLX: преди 1.78
• Wiesemann & Theis Com-Server Highspeed 19" 1Port: преди 1.78
• Wiesemann & Theis Com-Server Highspeed 19" 4Port: преди 1.78
• Wiesemann & Theis Com-Server Highspeed Compact: преди 1.78
• Wiesemann & Theis Com-Server Highspeed Industry: преди 1.78
• Wiesemann & Theis Com-Server Highspeed Isolated: преди 1.78
• Wiesemann & Theis Com-Server Highspeed OEM: преди 1.78
• Wiesemann & Theis Com-Server Highspeed Office 1 Port: преди 1.78
• Wiesemann & Theis Com-Server Highspeed Office 4 Port: преди 1.78
• Wiesemann & Theis Com-Server Highspeed PoE: преди 1.78
• Wiesemann & Theis Com-Server LC: преди 1.55
• Wiesemann & Theis Com-Server PoE 3 x Isolated: преди 1.55
• Wiesemann & Theis Com-Server UL: преди 1.55

Вид слабост

• CWE-290 Заобикаляне на автентикация чрез подправяне

История

Други уязвимости в Wiesemann & Theis Com-Server ++

• 9.1CVE-2025-3200
• 8.8CVE-2022-42787
• 5.4CVE-2022-42786
• 9.8CVE-2022-42785

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-4098
• https://nvd.nist.gov/vuln/detail/CVE-2022-4098
• https://cert.vde.com/en/advisories/VDE-2022-057/