CVE-2015-3968
HighSummary
The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.
Risk Assessment
The default password increases the risk of unauthorized access to files, which could lead to data leakage or modification.
Recommendation
It is recommended to change the default password to a strong and unique one to secure the FTP service against unauthorized access.
Other vulnerabilities in Janitza UMG 508, 509, 511, 604, 605
See all- CVE-2015-3972High
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, making it easier for remote attackers to gain access via a brute-force attack.
- CVE-2015-3971High
The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, allowing remote attackers to read or write files and execute arbitrary JASIC code via a session on TCP port 1239.
Original NVD description (English source)
The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.