Wiesemann & Theis vulnerabilities
We track 5 vulnerabilities in Wiesemann & Theis products across 20 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2025.
Latest Wiesemann & Theis vulnerabilities
- 7.5 High severity
Motherbox 3: Missing Authentication for Critical Functionality
An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stored measurement data.
- 9.1 Critical severity
Com-Server++: Use of a Broken or Risky Cryptographic Algorithm
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.
- 8.0 High severity
Com-Server ++: Authentication Bypass by Spoofing
Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spo
- 9.8 Critical severity
Com-Server LC: Missing Authentication for Critical Functionality
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
- 8.8 High severity
Com-Server LC: Use of Insufficiently Random Values
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs