CVE-2015-3972

The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.

Score

CVSS 2.0 10.0 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-10-28

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Umg 508 (Janitza)
• Umg 509 (Janitza)
• Umg 511 (Janitza)
• Umg 604 (Janitza)
• Umg 605 (Janitza)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03