{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Com-Server ++","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.55","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server 20mA","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.55","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed 100BaseFX","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed 100BaseLX","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed 19\" 1Port","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed 19\" 4Port","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed Compact","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed Industry","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed Isolated","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed OEM","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed Office 1 Port","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed Office 4 Port","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server Highspeed PoE","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.78","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server LC","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.55","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server PoE 3 x Isolated","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.55","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Com-Server UL","vendor":"Wiesemann & Theis","versions":[{"lessThan":"1.55","status":"affected","version":"0","versionType":"semver"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_\\+\\+_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"85F074B2-B298-4125-898E-211B929B1B30","versionEndExcluding":"1.55","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_\\+\\+:-:*:*:*:*:*:*:*","matchCriteriaId":"95A959DC-16BA-4F52-BC0E-8C005C00B20B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_20ma_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5DD7E27B-5D2F-4F1A-994B-4C08A7F37819","versionEndExcluding":"1.55","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_20ma:-:*:*:*:*:*:*:*","matchCriteriaId":"ED79295D-3E94-4396-ADB0-A346B0A2AF63","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_100basefx_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FD46E633-773F-4828-A672-C1A97B934EA5","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_100basefx:-:*:*:*:*:*:*:*","matchCriteriaId":"E7624DA1-E509-4BAA-A44C-BC4E16D9FCB1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_100baselx_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CD9D3C42-62EB-4121-851B-6A89EEFFF322","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_100baselx:-:*:*:*:*:*:*:*","matchCriteriaId":"B36DF0EE-58C2-4CC4-99C8-55FCDDC9597B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_19\\\"_1port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4A7ACA14-EA04-47AF-BF35-8487F6D22CA2","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_19\\\"_1port:-:*:*:*:*:*:*:*","matchCriteriaId":"65311BF2-70D2-475B-A314-0465FAA24E7F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_19\\\"_4port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A99FC278-A3E3-4619-B0BD-A9C3B9B5FE93","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_19\\\"_4port:-:*:*:*:*:*:*:*","matchCriteriaId":"B0099261-FBC5-4C6D-8558-E7F4BAD401AB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_compact_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E615A9CE-9E05-4336-AD4A-234CF4D2987F","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_compact:-:*:*:*:*:*:*:*","matchCriteriaId":"0F0E0076-658C-49E2-ACEF-A4109A22DEDA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_industry_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"94183D3F-CC93-4874-822D-605651E75179","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_industry:-:*:*:*:*:*:*:*","matchCriteriaId":"7E1ACF76-3B54-4960-9A44-19F5CED2216C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_isolated_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"09F2FD05-6903-42D1-8F59-E5F2950624FE","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_isolated:-:*:*:*:*:*:*:*","matchCriteriaId":"53646CB3-FAC9-447B-8762-66E20790041F","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_oem_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E6D88E1A-56E2-4FF3-AE30-008D4B70C02A","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_oem:-:*:*:*:*:*:*:*","matchCriteriaId":"A47245FC-FDD7-40E6-B78F-28E5902E052D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_office_1port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"79636A77-444A-4D0B-825A-738D019A7981","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_office_1port:-:*:*:*:*:*:*:*","matchCriteriaId":"62A566FD-B617-45DC-B0E8-D130C0BCF13E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_office_4port_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"535C0C59-A888-43D5-82C7-A1CEF8977527","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_office_4port:-:*:*:*:*:*:*:*","matchCriteriaId":"255D4A95-1A11-45F7-B14F-BC74F6D190AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_poe_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B85E5173-162C-41A7-8D08-E4021789DAA4","versionEndExcluding":"1.78","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_poe:-:*:*:*:*:*:*:*","matchCriteriaId":"0E25680B-D264-4562-B3AB-D6BAF0BEA433","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_lc_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"18EF3531-3040-4DDA-AE56-DBAF1FA8DB6C","versionEndExcluding":"1.55","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_lc:-:*:*:*:*:*:*:*","matchCriteriaId":"B0567E35-5011-4C17-8737-A20F55922F59","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_poe_3x_isolated_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"77F3C69D-6EAF-49CF-B961-A570F94A6E1B","versionEndExcluding":"1.55","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_poe_3x_isolated:-:*:*:*:*:*:*:*","matchCriteriaId":"F851852B-75EA-4F1C-8BFB-DE29394D510B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:wut:com-server_highspeed_ul_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4BA1D1BD-7CAD-4A9E-87DC-B5198948FD5B","versionEndExcluding":"1.55","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:wut:com-server_highspeed_ul:-:*:*:*:*:*:*:*","matchCriteriaId":"5C5BB32C-F7B5-4E34-A60A-DDA084EB3F45","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device."},{"lang":"es","value":"Varios productos de Wiesemann&Theis de la serie ComServer son propensos a omitir la autenticación debido a la suplantación de IP. Después de que un usuario inicia sesión en el WBM del Com-Server, un atacante no autenticado en la misma subred puede obtener el ID de la sesión y, a través de la suplantación de IP, cambiar configuraciones arbitrarias mediante la creación de solicitudes HTTP Get modificadas. Esto puede resultar en una adquisición total del dispositivo."}],"id":"CVE-2022-4098","lastModified":"2026-06-17T05:19:56.667","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.1,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.1,"impactScore":5.9,"source":"nvd@nist.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4098","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-04-14T18:06:43.505209Z","version":"2.0.3"}}]},"published":"2022-12-13T08:15:10.283","references":[{"source":"info@cert.vde.com","tags":["Vendor Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-057/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://cert.vde.com/en/advisories/VDE-2022-057/"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-290"}],"source":"info@cert.vde.com","type":"Secondary"}]}