CVEvulnerability
CVE-2015-3972
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-254
Description
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected configurations
• janitza umg 508
• janitza umg 509
• janitza umg 511
• janitza umg 604
• janitza umg 605
Related
Weakness · not in database (1)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03 Patch, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03 Patch, Third Party Advisory, US Government Resource