Authentication flaw

The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack...

Authentication flaw

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239...

Design/Logic Flaw

Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values...

CVE-2015-3967

Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-3972

The CVE refers to Janitza UMG power quality devices (UMG 508, 509, 511, 604, and 605). The underlying issue is weak authentication via the web interface, caused by allowing only short PIN values and insufficient randomization of session tokens, enabling remote brute-force access. Impact per sourc...

CVE-2015-3969

CVE-2015-3969 affects Janitza UMG power quality devices (UMG 508/509/511/604/605). The vulnerability is an information-disclosure issue where remote attackers can obtain sensitive network-connection information by sending requests to UDP ports 1234 or 1235. Public exploits exist for this CVE; the...

CVE-2015-3973

CVE-2015-3973 affects Janitza UMG power quality devices (UMG 508, 509, 511, 604, 605). The root cause is improper session token generation, where session tokens derive from the 4‑digit PIN plus a server‑generated challenge, enabling an attacker to potentially determine the PIN from session tokens...

CVE-2015-3970

The CVE-2015-3970 entry concerns Janitza UMG power quality devices (UMG 508, 509, 511, 604, 605). It describes multiple cross-site scripting (XSS) vulnerabilities in the device web interface that allow remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue is accessib...

CVE-2015-3971

CVE-2015-3971 for Janitza UMG devices (508, 509, 511, 604, 605) : The debug/web interface on these UMG devices exposes an unauthenticated session over TCP port 1239, allowing remote attackers to read/write files or execute arbitrary JASIC code. This constitutes unauthenticated remote control of t...

CVE-2015-3967

Cross-site request forgery CSRF vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-3969

Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port 1 1234 or 2 1235...

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

CVE-2015-3970

Multiple cross-site scripting XSS vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3971

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239...

CVE-2015-3972

The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2015-3973

Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values...

CVE-2015-3968

Summary of CVE-2015-3968 : The Janitza UMG power quality devices (models 508, 509, 511, 604, 605) expose an FTP interface protected by a default/password-hardcoded credential, enabling remote attackers to read or write files via TCP port 21. The root cause is weak/default credentials in the devic...

CVE-2015-3967

CVE-2015-3967 affects Janitza UMG power quality devices (UMG 508, 509, 511, 604, 605). It is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of arbitrary users. Exploitation is described as possible remotely, and public exploits exist fo...

Janitza UMG Power Quality Measuring Products Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on September 22, 2015, and is being released to the NCCIC/ICS-CERT web site. Mattijs van Ommeren of Applied Risk has identified several vulnerabilities in the Janitza UMG power quality measuring products. Janitza ha...