CVE-2015-3968

2015-10-2810:59:01

CWE-255

[email protected]

web.nvd.nist.gov

janitza umg

cve-2015-3968

ftp service

default password

remote attackers

tcp port 21

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

JSON

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.

Affected configurations

NVD

Node

janitzaumg_508Match-

janitzaumg_509Match-

janitzaumg_511Match-

janitzaumg_604Match-

janitzaumg_605Match-

CPENameOperatorVersion
janitza:umg_508janitza umg 508eq-
janitza:umg_509janitza umg 509eq-
janitza:umg_511janitza umg 511eq-
janitza:umg_604janitza umg 604eq-
janitza:umg_605janitza umg 605eq-

CPE	Name	Operator	Version
janitza:umg_508	janitza umg 508	eq	-
janitza:umg_509	janitza umg 509	eq	-
janitza:umg_511	janitza umg 511	eq	-
janitza:umg_604	janitza umg 604	eq	-
janitza:umg_605	janitza umg 605	eq	-