CVE-2022-4098
Wiesemann & Theis: Multiple products prone to missing authentication through spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Wiesemann & Theis: Multiple products prone to missing authentication through spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
- Record
CVE-2022-4098- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-290
- Updated
- 2026-11-02
EUVDEUVD-2022-51468
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
- Record
EUVD-2022-51468- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9w34-3vc7-7786
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass...
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. During an authenticated session to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
- Record
GHSA-9w34-3vc7-7786- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-290
- Updated
- 2026-11-02
NVD
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
- Record
CVE-2022-4098- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-290
- Updated
- 2026-11-02
Affected products
- wiesemann & theis com-server ++
- wiesemann & theis com-server 20ma
- wiesemann & theis com-server highspeed 100basefx
- wiesemann & theis com-server highspeed 100baselx
- wiesemann & theis com-server highspeed 19" 1port
- wiesemann & theis com-server highspeed 19" 4port
- wiesemann & theis com-server highspeed compact
- wiesemann & theis com-server highspeed industry
- wiesemann & theis com-server highspeed isolated
- wiesemann & theis com-server highspeed oem
- wiesemann & theis com-server highspeed office 1 port
- wiesemann & theis com-server highspeed office 4 port
Show 20 moreShow less
- wiesemann & theis com-server highspeed poe
- wiesemann & theis com-server lc
- wiesemann & theis com-server poe 3 x isolated
- wiesemann & theis com-server ul
- wut com-server 20ma firmware
- wut com-server \+\+ firmware
- wut com-server highspeed 100basefx firmware
- wut com-server highspeed 100baselx firmware
- wut com-server highspeed 19\" 1port firmware
- wut com-server highspeed 19\" 4port firmware
- wut com-server highspeed compact firmware
- wut com-server highspeed industry firmware
- wut com-server highspeed isolated firmware
- wut com-server highspeed lc firmware
- wut com-server highspeed oem firmware
- wut com-server highspeed office 1port firmware
- wut com-server highspeed office 4port firmware
- wut com-server highspeed poe 3x isolated firmware
- wut com-server highspeed poe firmware
- wut com-server highspeed ul firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-4098 is a high vulnerability (CVSS 8.0) in Wiesemann & Theis Com-server ++, published December 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.