CVE-2022-4098: Wiesemann & Theis: Multiple products prone to missing authentication through spoofing

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-13 · updated 2026-06-17
Weakness: CWE-290

Description

Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.

Affected products

Wut Com-Server ++ Firmware: before 1.55 — fixed in 1.55
Wut Com-Server 20Ma Firmware: before 1.55 — fixed in 1.55
Wut Com-Server Highspeed 100Basefx Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed 100Baselx Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed 19" 1Port Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed 19" 4Port Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Compact Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Industry Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Isolated Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Lc Firmware: before 1.55 — fixed in 1.55
Wut Com-Server Highspeed Oem Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Office 1Port Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Office 4Port Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Poe 3X Isolated Firmware: before 1.55 — fixed in 1.55
Wut Com-Server Highspeed Poe Firmware: before 1.78 — fixed in 1.78
Wut Com-Server Highspeed Ul Firmware: before 1.55 — fixed in 1.55

How to fix

Upgrade to a fixed version: Wut Com-Server ++ Firmware 1.55; Wut Com-Server 20Ma Firmware 1.55; Wut Com-Server Highspeed 100Basefx Firmware 1.78; Wut Com-Server Highspeed 100Baselx Firmware 1.78; Wut Com-Server Highspeed 19" 1Port Firmware 1.78; Wut Com-Server Highspeed 19" 4Port Firmware 1.78; Wut Com-Server Highspeed Compact Firmware 1.78; Wut Com-Server Highspeed Industry Firmware 1.78; Wut Com-Server Highspeed Isolated Firmware 1.78; Wut Com-Server Highspeed Lc Firmware 1.55; Wut Com-Server Highspeed Oem Firmware 1.78; Wut Com-Server Highspeed Office 1Port Firmware 1.78. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-4098 or the next vulnerability affects your stack