Weak Authentication in Janitza UMG Devices Allows Brute-Force Attacks
CVE-2015-3972

Currently unrated

Key Information:

Vendor: Janitza
Status: Umg 511; Umg 509; Umg 508; Umg 604
Vendor: CVE Published:; 28 October 2015

What is CVE-2015-3972?

The web interface of Janitza UMG devices (models 508, 509, 511, 604, and 605) is vulnerable due to its reliance on short PIN values for authentication. This limitation exposes the devices to remote attackers who can exploit this weakness via brute-force methods, potentially gaining unauthorized access.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 28, 2015
Vulnerability Reserved
May 12, 2015

CVE-2015-3972 Data

JSON