Wiesemann & Theis: Multiple products prone to missing authentication through spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Com-Server ++
Vendor
Wiesemann & Theis
Product
Com-Server ++
Platforms
Unknown
Default status
unaffected
Com-Server ++ · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.55
Unavailable
None listed
Com-Server 20mA
Vendor
Wiesemann & Theis
Product
Com-Server 20mA
Platforms
Unknown
Default status
unaffected
Com-Server 20mA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.55
Unavailable
None listed
Com-Server Highspeed 100BaseFX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseFX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseFX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed 100BaseLX
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 100BaseLX
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 100BaseLX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed 19" 1Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 1Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 1Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed 19" 4Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed 19" 4Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed 19" 4Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed Compact
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Compact
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Compact · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed Industry
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Industry
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Industry · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed Isolated
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Isolated
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Isolated · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed OEM
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed OEM
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed OEM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed Office 1 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 1 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 1 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed Office 4 Port
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed Office 4 Port
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed Office 4 Port · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server Highspeed PoE
Vendor
Wiesemann & Theis
Product
Com-Server Highspeed PoE
Platforms
Unknown
Default status
unaffected
Com-Server Highspeed PoE · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.78
Unavailable
None listed
Com-Server LC
Vendor
Wiesemann & Theis
Product
Com-Server LC
Platforms
Unknown
Default status
unaffected
Com-Server LC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
1.55
Unavailable
None listed
Com-Server PoE 3 x Isolated
Vendor
Wiesemann & Theis
Product
Com-Server PoE 3 x Isolated
Platforms
Unknown
Default status
unaffected
Com-Server PoE 3 x Isolated · Scoped product and version facts