{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "tracking": { "generator": { "date": "2025-03-20T10:27:14.854Z", "engine": { "version": "2.5.21", "name": "Secvisogram" } }, "current_release_date": "2025-05-14T13:00:14.000Z", "id": "VDE-2022-057", "initial_release_date": "2022-12-13T07:00:00.000Z", "version": "2", "status": "final", "revision_history": [ { "number": "1", "date": "2022-12-13T07:00:00.000Z", "summary": "Initial revision." }, { "number": "2", "summary": "Fix: added distribution", "date": "2025-05-14T13:00:14.000Z" } ], "aliases": [ "VDE-2022-057" ] }, "title": "Wiesemann & Theis multiple products prone to web interface vulnerability", "lang": "en-GB", "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordination" }, { "organization": "Martin Weiß", "summary": "disclosing this vulnerability" } ], "notes": [ { "category": "summary", "title": "Summary", "text": "Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user." }, { "title": "Impact", "category": "description", "text": "The attacker can set all settings and take over the device completely." }, { "text": "Update Com-Server family to version 1.55 Update Com-Server Highspeed family to version 1.78 or higher", "title": "Remediation", "category": "description" } ], "publisher": { "contact_details": "security@wut.de", "category": "vendor", "name": "Wiesemann & Theis GmbH", "namespace": "https://www.wut.de" }, "references": [ { "summary": "Wiesemann & Theis PSIRT ", "url": "https://www.wut.de", "category": "external" }, { "summary": "CERT@VDE Security Advisories for Wiesemann & Theis GmbH", "url": "https://certvde.com/en/advisories/vendor/wut/", "category": "external" }, { "summary": "VDE-2022-057: Wiesemann & Theis multiple products prone to web interface vulnerability - HTML", "url": "https://certvde.com/en/advisories/VDE-2022-057/", "category": "self" }, { "url": "https://wut.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2022-057.json", "summary": "VDE-2022-057: Wiesemann & Theis multiple products prone to web interface vulnerability - CSAF", "category": "self" } ], "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } } }, "product_tree": { "branches": [ { "name": "Wiesemann & Theis", "category": "vendor", "branches": [ { "name": "Software", "category": "product_family", "branches": [ { "name": "Com-Server ++", "category": "product_name", "branches": [ { "name": "<1.55", "category": "product_version_range", "product": { "name": "Com-Server ++ <1.55", "product_id": "CSAFPID-51001", "product_identification_helper": { "model_numbers": [ "58665" ] } } }, { "name": "1.55", "category": "product_version", "product": { "name": "Com-Server ++ 1.55", "product_id": "CSAFPID-52001" } } ] }, { "name": "Com-Server 20mA", "category": "product_name", "branches": [ { "name": "<1.55", "category": "product_version_range", "product": { "name": "Com-Server 20mA <1.55", "product_id": "CSAFPID-51002", "product_identification_helper": { "model_numbers": [ "58664" ] } } }, { "name": "1.55", "category": "product_version", "product": { "name": "Com-Server 20mA 1.55", "product_id": "CSAFPID-52002" } } ] }, { "name": "Com-Server Highspeed 100BaseFX", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed 100BaseFX <1.78", "product_id": "CSAFPID-51003", "product_identification_helper": { "model_numbers": [ "58651" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed 100BaseFX 1.78", "product_id": "CSAFPID-52003" } } ] }, { "name": "Com-Server Highspeed 100BaseLX", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed 100BaseLX <1.78", "product_id": "CSAFPID-51004", "product_identification_helper": { "model_numbers": [ "58652" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Software Com-Server Highspeed 100BaseLX 1.78", "product_id": "CSAFPID-52004" } } ] }, { "name": "Com-Server Highspeed 19\" 1Port", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed 19\" 1Port <1.78", "product_id": "CSAFPID-51005", "product_identification_helper": { "model_numbers": [ "58331" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed 19\" 1Port 1.78", "product_id": "CSAFPID-52005" } } ] }, { "name": "Com-Server Highspeed 19\" 4Port", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed 19\" 4Port <1.78", "product_id": "CSAFPID-51006", "product_identification_helper": { "model_numbers": [ "58334" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed 19\" 4Port 1.78", "product_id": "CSAFPID-52006" } } ] }, { "name": "Com-Server Highspeed Compact", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed Compact <1.78", "product_id": "CSAFPID-51007", "product_identification_helper": { "model_numbers": [ "58231" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed Compact 1.78", "product_id": "CSAFPID-52007" } } ] }, { "name": "Com-Server Highspeed Industry", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed Industry <1.78", "product_id": "CSAFPID-51008", "product_identification_helper": { "model_numbers": [ "58631" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed Industry 1.78", "product_id": "CSAFPID-52008" } } ] }, { "name": "Com-Server Highspeed Isolated", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed Isolated <1.78", "product_id": "CSAFPID-51009", "product_identification_helper": { "model_numbers": [ "58633" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed Isolated 1.78", "product_id": "CSAFPID-52009" } } ] }, { "name": "Com-Server Highspeed OEM", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed OEM <1.78", "product_id": "CSAFPID-51010", "product_identification_helper": { "model_numbers": [ "58431" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed OEM 1.78", "product_id": "CSAFPID-52010" } } ] }, { "name": "Com-Server Highspeed Office 1 Port", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed Office 1 Port <1.78", "product_id": "CSAFPID-51011", "product_identification_helper": { "model_numbers": [ "58031" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed Office 1 Port 1.78", "product_id": "CSAFPID-52011" } } ] }, { "name": "Com-Server Highspeed Office 4 Port", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed Office 4 Port <1.78", "product_id": "CSAFPID-51012", "product_identification_helper": { "model_numbers": [ "58034" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed Office 4 Port 1.78", "product_id": "CSAFPID-52012" } } ] }, { "name": "Com-Server Highspeed PoE", "category": "product_name", "branches": [ { "name": "<1.78", "category": "product_version_range", "product": { "name": "Com-Server Highspeed PoE <1.78", "product_id": "CSAFPID-51013", "product_identification_helper": { "model_numbers": [ "58641" ] } } }, { "name": "1.78", "category": "product_version", "product": { "name": "Com-Server Highspeed PoE 1.78", "product_id": "CSAFPID-52013" } } ] }, { "name": "Com-Server LC", "category": "product_name", "branches": [ { "name": "<1.55", "category": "product_version_range", "product": { "name": "Com-Server LC <1.55", "product_id": "CSAFPID-51014", "product_identification_helper": { "model_numbers": [ "58661" ] } } }, { "name": "1.55", "category": "product_version", "product": { "name": "Com-Server LC 1.55", "product_id": "CSAFPID-52014" } } ] }, { "name": "Com-Server PoE 3 x Isolated", "category": "product_name", "branches": [ { "name": "<1.55", "category": "product_version_range", "product": { "name": "Com-Server PoE 3 x Isolated <1.55", "product_id": "CSAFPID-51015", "product_identification_helper": { "model_numbers": [ "58662" ] } } }, { "name": "1.55", "category": "product_version", "product": { "name": "Com-Server PoE 3 x Isolated 1.55", "product_id": "CSAFPID-52015" } } ] }, { "name": "Com-Server UL", "category": "product_name", "branches": [ { "name": "<1.55", "category": "product_version_range", "product": { "name": "Com-Server UL <1.55", "product_id": "CSAFPID-51016", "product_identification_helper": { "model_numbers": [ "58669" ] } } }, { "name": "1.55", "category": "product_version", "product": { "name": "Com-Server UL 1.55", "product_id": "CSAFPID-52016" } } ] } ] } ] } ], "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "Affected Products", "product_ids": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016" ] }, { "group_id": "CSAFGID-0002", "summary": "Fixed Products", "product_ids": [ "CSAFPID-52001", "CSAFPID-52002", "CSAFPID-52003", "CSAFPID-52004", "CSAFPID-52005", "CSAFPID-52006", "CSAFPID-52007", "CSAFPID-52008", "CSAFPID-52009", "CSAFPID-52010", "CSAFPID-52011", "CSAFPID-52012", "CSAFPID-52013", "CSAFPID-52014", "CSAFPID-52015", "CSAFPID-52016" ] } ] }, "vulnerabilities": [ { "cve": "CVE-2022-4098", "title": "CVE-2022-4098", "cwe": { "id": "CWE-290", "name": "Authentication Bypass by Spoofing" }, "notes": [ { "title": "Vulnerability Description", "text": "Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. During an authenticated session to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.", "category": "description" } ], "product_status": { "known_affected": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016" ], "fixed": [ "CSAFPID-52001", "CSAFPID-52002", "CSAFPID-52003", "CSAFPID-52004", "CSAFPID-52005", "CSAFPID-52006", "CSAFPID-52007", "CSAFPID-52008", "CSAFPID-52009", "CSAFPID-52010", "CSAFPID-52011", "CSAFPID-52012", "CSAFPID-52013", "CSAFPID-52014", "CSAFPID-52015", "CSAFPID-52016" ] }, "remediations": [ { "details": "Update Com-Server family to version 1.55 Update Com-Server Highspeed family to version 1.78 or higher", "category": "vendor_fix", "group_ids": [ "CSAFGID-0001" ] } ], "scores": [ { "cvss_v3": { "attackVector": "ADJACENT_NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.1, "baseSeverity": "HIGH", "temporalScore": 7.1, "temporalSeverity": "HIGH", "environmentalScore": 7.1, "environmentalSeverity": "HIGH" }, "products": [ "CSAFPID-51001", "CSAFPID-51002", "CSAFPID-51003", "CSAFPID-51004", "CSAFPID-51005", "CSAFPID-51006", "CSAFPID-51007", "CSAFPID-51008", "CSAFPID-51009", "CSAFPID-51010", "CSAFPID-51011", "CSAFPID-51012", "CSAFPID-51013", "CSAFPID-51014", "CSAFPID-51015", "CSAFPID-51016" ] } ] } ] }