ICS Advisories

Risk evaluation

Motherbox 3 with firmware 1.44 to 1.48 allows an unauthenticated remote attacker read-only access to the internal DB with measurement values from other W&T sensor devices.

Mitigation summary

Access to the database should be limited to trustworthy networks or peers.

Risk evaluation

Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.

Mitigation summary

Update Com-Server family to version 1.55 Update Com-Server Highspeed family to version 1.78 or higher

Risk evaluation

Multiple Wiesemann & Theis software products are affected by a vulnerability through an unquoted search path in the Windows registry. A local attacker can execute arbitrary code and gain administrative privileges by inserting an executable file in the path of the affected product. Update A, 07.03.2024 Incorrect version numbers have been corrected.

Mitigation summary

- Update Com Redirector Legacy external link to version 3.94 or higher (Art.No. 00102) - Update Com Redirector PnP external link to version 4.43 or higher (Art.No. 00111) - Update OPC-Server external link to version 4.89 or higher (Art.No. 00103)

Risk evaluation

Multiple W&T devices are shipped with a jQuery version with a known XSS vulnerability.

Mitigation summary

Access to the WBM should be limited to trustworthy networks or peers.

Risk evaluation

Multiple W&T Products are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via crafted payloads injected into several input fields of the configuration webpage.

Mitigation summary

Access to the WBM should be limited to trustworthy networks or peers.

Risk evaluation

Com-Server firmware versions prior to 1.60 support the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to man-in-the-middle attacks and thereby compromise the confidentiality and integrity of data.

Mitigation summary

Access to the WBM should be limited to trustworthy networks or peers.

Risk evaluation

Multiple Wiesemann & Theis product families are affected by multiple vulnerabilities in the web interface.

Mitigation summary

- Update Com-Server Family to version 1.48 or higher. - Update the Com-Server Highspeed Family to version 1.76 or higher.