Wiesemann & Theis: Multiple products prone to missing authentication through spoofing
Priority LOW 35CWE-290Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-290.
Summary
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00346 28th percentileScored 2026-11-07
Fix Fixed Com-Server ++ (Wiesemann & Theis): 1.55Com-Server 20mA (Wiesemann & Theis): 1.55+14 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Wiesemann & Theis | Com-Server ++ | before 1.55 | 1.55 | Patch available | CNA |
| Wiesemann & Theis | Com-Server 20mA | before 1.55 | 1.55 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed 100BaseFX | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed 100BaseLX | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed 19" 1Port | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed 19" 4Port | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed Compact | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed Industry | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed Isolated | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed OEM | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed Office 1 Port | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed Office 4 Port | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server Highspeed PoE | before 1.78 | 1.78 | Patch available | CNA |
| Wiesemann & Theis | Com-Server LC | before 1.55 | 1.55 | Patch available | CNA |
| Wiesemann & Theis | Com-Server PoE 3 x Isolated | before 1.55 | 1.55 | Patch available | CNA |
| Wiesemann & Theis | Com-Server UL | before 1.55 | 1.55 | Patch available | CNA |
- Com-Server ++ VendorWiesemann & Theis Affected before 1.55 Fixed in 1.55 Patch available CNA
- Com-Server 20mA VendorWiesemann & Theis Affected before 1.55 Fixed in 1.55 Patch available CNA
- Com-Server Highspeed 100BaseFX VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed 100BaseLX VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed 19" 1Port VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed 19" 4Port VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed Compact VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed Industry VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed Isolated VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed OEM VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed Office 1 Port VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed Office 4 Port VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server Highspeed PoE VendorWiesemann & Theis Affected before 1.78 Fixed in 1.78 Patch available CNA
- Com-Server LC VendorWiesemann & Theis Affected before 1.55 Fixed in 1.55 Patch available CNA
- Com-Server PoE 3 x Isolated VendorWiesemann & Theis Affected before 1.55 Fixed in 1.55 Patch available CNA
- Com-Server UL VendorWiesemann & Theis Affected before 1.55 Fixed in 1.55 Patch available CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wut:com-server_\+\+_firmware:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_\+\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_20ma_firmware:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_20ma:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_100basefx_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_100basefx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_100baselx_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_100baselx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_19\"_1port_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_19\"_1port:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
- cpe:2.3:o:wut:com-server_\+\+_firmware:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_\+\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_20ma_firmware:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_20ma:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_100basefx_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_100basefx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_100baselx_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_100baselx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_19\"_1port_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_19\"_1port:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wut:com-server_highspeed_19\"_4port_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_19\"_4port:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_compact_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_compact:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_industry_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_industry:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_isolated_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_isolated:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_oem_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_oem:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_office_1port_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_office_1port:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_office_4port_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_office_4port:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_poe_firmware:*:*:*:*:*:*:*:* | before 1.78 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_poe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_lc_firmware:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_lc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_poe_3x_isolated_firmware:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_poe_3x_isolated:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
| cpe:2.3:o:wut:com-server_highspeed_ul_firmware:*:*:*:*:*:*:*:* | before 1.55 | Vulnerable | Wiesemann & Theis |
| cpe:2.3:h:wut:com-server_highspeed_ul:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Wiesemann & Theis |
- cpe:2.3:o:wut:com-server_highspeed_19\"_4port_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_19\"_4port:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_compact_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_industry_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_industry:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_isolated_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_isolated:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_oem_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_oem:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_office_1port_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_office_1port:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_office_4port_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_office_4port:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_poe_firmware:*:*:*:*:*:*:*:* Versions before 1.78 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_lc_firmware:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_lc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_poe_3x_isolated_firmware:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_poe_3x_isolated:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
- cpe:2.3:o:wut:com-server_highspeed_ul_firmware:*:*:*:*:*:*:*:* Versions before 1.55 Vulnerable ·Wiesemann & Theis
- cpe:2.3:h:wut:com-server_highspeed_ul:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wiesemann & Theis
Remediation
- Fix · CNA Com-Server ++ (Wiesemann & Theis) Fixed in 1.55
- Fix · CNA Com-Server 20mA (Wiesemann & Theis) Fixed in 1.55
- Fix · CNA Com-Server Highspeed 100BaseFX (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed 100BaseLX (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed 19" 1Port (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed 19" 4Port (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed Compact (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed Industry (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed Isolated (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed OEM (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed Office 1 Port (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed Office 4 Port (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server Highspeed PoE (Wiesemann & Theis) Fixed in 1.78
- Fix · CNA Com-Server LC (Wiesemann & Theis) Fixed in 1.55
- Fix · CNA Com-Server PoE 3 x Isolated (Wiesemann & Theis) Fixed in 1.55
- Fix · CNA Com-Server UL (Wiesemann & Theis) Fixed in 1.55
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4098
- 2026-10-03 Alias added: GHSA-9w34-3vc7-7786
References
More Wiesemann & Theis Com-server 20ma Firmware vulnerabilities
- TI-2022-20802 Wiesemann & Theis: Authentication bypass in Com-Server family CVSS 3.1CRITICAL 9.8
- TI-2022-20804 Wiesemann & Theis: Small number space for allocating session id in Com-Server family CVSS 3.1HIGH 8.8
- TI-2022-20803 Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family CVSS 3.1MEDIUM 5.4
Sources
- CVE-2022-4098 · CVE Program
- CVE-2022-4098 · NVD
- FIRST EPSS
- GHSA-9w34-3vc7-7786 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences