Wiesemann & Theis Motherbox 3 Unauthenticated Read-Only Database Access Vulnerability

A vulnerability in Wiesemann & Theis Motherbox 3 firmware versions 1.44 through 1.48 allows unauthenticated remote access to the internal database. This access is granted without password protection, enabling unprotected read-only retrieval of measurement data from other W&T sensor devices.

Impact

Exploitation of this vulnerability allows for unauthenticated read-only access to the internal database, where measurement values from other W&T sensor devices can be accessed.

Remediation

Users are advised to update the Motherbox 3 firmware to version 1.49.