CVE-2015-3970 Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecifie...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| janitza umg 508 | All versions | No fix listed |
| janitza umg 509 | All versions | No fix listed |
| janitza umg 511 | All versions | No fix listed |
| janitza umg 604 | All versions | No fix listed |
| janitza umg 605 | All versions | No fix listed |
References
- ics-cert.us-cert.gov patch third-party-advisory us-government-resource