title: Wiesemann & Theis: Multiple products prone to missing authentication through spoofing
description: Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
problem types: CWE-290 Authentication Bypass by Spoofing
affected:
{
defaultStatus: unaffected
product: Com-Server ++
vendor: Wiesemann & Theis
versions:
lessThan: 1.55, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server 20mA
vendor: Wiesemann & Theis
versions:
lessThan: 1.55, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed 100BaseFX
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed 100BaseLX
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed 19" 1Port
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed 19" 4Port
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed Compact
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed Industry
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed Isolated
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed OEM
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed Office 1 Port
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed Office 4 Port
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server Highspeed PoE
vendor: Wiesemann & Theis
versions:
lessThan: 1.78, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server LC
vendor: Wiesemann & Theis
versions:
lessThan: 1.55, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server PoE 3 x Isolated
vendor: Wiesemann & Theis
versions:
lessThan: 1.55, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: Com-Server UL
vendor: Wiesemann & Theis
versions:
lessThan: 1.55, status: affected, version: 0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL