High severity8.0NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-4098
CVE-2022-4098
Description
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: 0
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- cert.vde.com/en/advisories/VDE-2022-057/nvdVendor Advisory
News mentions
0No linked articles in our index yet.