7.5

CVE-2015-3971

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Janitza ≫ Umg 508 Version-
Janitza ≫ Umg 509 Version-
Janitza ≫ Umg 511 Version-
Janitza ≫ Umg 604 Version-
Janitza ≫ Umg 605 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.578
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03
Patch
Third Party Advisory
US Government Resource