Enbra Ewm Data Forgery Issue Vulnerability

Enbra Ewm is a universal reading device from the Czech company Enbra. It uses a radio to read water meters, heating cost indicators and heat meters. Enbra EWM is vulnerable to a data forgery issue in version 1.7.29, which stems from the fact that the software does not check for or detect replay attacks sent by wireless M-Bus Secure Mode 5 devices. Instead, the sensor timestamp is replaced by the time of the readout, even if the data is a replay of earlier data. No details of the vulnerability are currently available.