CVE-2015-3972 The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force at...
HighCVSS 10.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| janitza umg 508 | All versions | No fix listed |
| janitza umg 509 | All versions | No fix listed |
| janitza umg 511 | All versions | No fix listed |
| janitza umg 604 | All versions | No fix listed |
| janitza umg 605 | All versions | No fix listed |
References
- ics-cert.us-cert.gov patch third-party-advisory us-government-resource