Vulnerability Details CVE-2015-3972
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2015-3972
-
cpe:2.3:h:janitza:umg_508:-
-
cpe:2.3:h:janitza:umg_509:-
-
cpe:2.3:h:janitza:umg_511:-
-
cpe:2.3:h:janitza:umg_604:-
-
cpe:2.3:h:janitza:umg_605:-