Description (CNA)
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wiesemann & Theis / Com-Server ++ | affected 0 before 1.55 |
| Wiesemann & Theis / Com-Server 20mA | affected 0 before 1.55 |
| Wiesemann & Theis / Com-Server Highspeed 100BaseFX | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed 100BaseLX | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed 19" 1Port | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed 19" 4Port | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed Compact | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed Industry | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed Isolated | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed OEM | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed Office 1 Port | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed Office 4 Port | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server Highspeed PoE | affected 0 before 1.78 |
| Wiesemann & Theis / Com-Server LC | affected 0 before 1.55 |
| Wiesemann & Theis / Com-Server PoE 3 x Isolated | affected 0 before 1.55 |
| Wiesemann & Theis / Com-Server UL | affected 0 before 1.55 |
CWE
CWE-290
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.