CVE:CVE-2022-4098
CNNVD:CNNVD-202212-3055
Wiesemann & Theis Com-Server Family是德国Wiesemann & Theis公司的一系列串行设备服务器。
Wiesemann & Theis Com-Server Family 存在安全漏洞，该漏洞源于容易通过 IP 欺骗绕过身份验证，在与 Com-Server 的 WBM 的经过身份验证的会话期间，同一子网中未经身份验证的攻击者可以获得会话 ID，并通过 IP 欺骗通过制作修改后的 HTTP Get 请求来更改任意设置，这可能会导致完全接管设备。
solution:Upgrade wut com-server_++_firmware to a higher version than 1.55,and avoid the version (,1.55); Upgrade wut com-server_20ma_firmware to a higher version than 1.55,and avoid the version (,1.55); Upgrade wut com-server_highspeed_100basefx_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_100baselx_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_19"_1port_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_19"_4port_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_compact_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_industry_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_isolated_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_oem_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_office_1port_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_office_4port_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_poe_firmware to a higher version than 1.78,and avoid the version (,1.78); Upgrade wut com-server_highspeed_lc_firmware to a higher version than 1.55,and avoid the version (,1.55); Upgrade wut com-server_highspeed_poe_3x_isolated_firmware to a higher version than 1.55,and avoid the version (,1.55); Upgrade wut com-server_highspeed_ul_firmware to a higher version than 1.55,and avoid the version (,1.55)