Lucene search
HistoryOct 28, 2015 - 10:59 a.m.
CVE-2015-3972
cve-2015-3972
janitza
umg
web interface
authentication
brute-force
vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.2%
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected configurations
Node
janitzaumg_508Match-
ORjanitzaumg_509Match-
ORjanitzaumg_511Match-
ORjanitzaumg_604Match-
ORjanitzaumg_605Match-
Related
cvelist
cvelist
CVE-2015-3972
2015-10-28 10:00:00
nessus
nessus
Janitza UMG Power Quality Measuring Weak Authentication (CVE-2015-3972)
2024-02-12 00:00:00
prion
prion
Authentication flaw
2015-10-28 10:59:00
nvd
nvd
CVE-2015-3972
2015-10-28 10:59:06
ics
ics
Janitza UMG Power Quality Measuring Products Vulnerabilities
2018-08-27 12:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.2%
Related for CVE-2015-3972