CVE-2015-3971

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.

Score

CVSS 2.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-10-28

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Umg 508 (Janitza)
• Umg 509 (Janitza)
• Umg 511 (Janitza)
• Umg 604 (Janitza)
• Umg 605 (Janitza)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03