EUVD-2015-4002

Malware in sbrugna...

Janitza UMG Power Quality Measuring Improper Access Control (CVE-2015-3971)

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239. This plugin only works with Tenable.ot. Please visit...

Authentication flaw

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239...

CVE-2015-3971

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239...

PT-2015-2605

Name of the Vulnerable Software and Affected Versions Janitza UMG versions 508, 509, 511, 604, 605 Description The issue concerns the debug interface of the affected devices, which lacks authentication. This allows remote attackers to establish a session on TCP port 1239 and perform unauthorized...