Janitza UMG Power Quality Measuring Products Vulnerabilities

🗓️ 25 Jun 2015 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 70 Views

Janitza UMG Power Quality Measuring Products Vulnerabilities and Mitigation

Reporter	Title	Published	Views	Family All 43
BDU FSTEC	The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a hacker to calculate the PIN code value.	20 Nov 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to gain access to the device.	20 Nov 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a perpetrator to read and write files or execute JASIC code.	20 Nov 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to inject arbitrary web or HTML code.	20 Nov 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to read or write files.	20 Nov 201500:00	–	bdu_fstec
CNVD	Janitza UMG Arbitrary File Read/Write Vulnerability (CNVD-2015-07286)	30 Oct 201500:00	–	cnvd
CNVD	Janitza UMG has multiple cross-site scripting vulnerabilities	30 Oct 201500:00	–	cnvd
CNVD	Janitza UMG Arbitrary File Read/Write Vulnerability	30 Oct 201500:00	–	cnvd
CNVD	Janitza UMG Brute Force Attack Vulnerability	30 Oct 201500:00	–	cnvd
CNVD	Janitza UMG Session Token Flaw Vulnerability	30 Oct 201500:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2015/icsa-15-265-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-15-265-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

25 Jun 2015 06:00Current

7.2High risk

Vulners AI Score7.2

CVSS 210

EPSS0.02858

vulnerabilities janitza umg power quality remote exploitation device control confidentiality integrity availability germany energy sector weak password protection weak session token generation hard-coded password cwe-521 cwe-330 cwe-259