CVE-2015-3973 Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token va...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| janitza umg 508 | All versions | No fix listed |
| janitza umg 509 | All versions | No fix listed |
| janitza umg 511 | All versions | No fix listed |
| janitza umg 604 | All versions | No fix listed |
| janitza umg 605 | All versions | No fix listed |
References
- ics-cert.us-cert.gov patch third-party-advisory us-government-resource