CVE-2015-3972
HighSummary
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, making it easier for remote attackers to gain access via a brute-force attack.
Risk Assessment
The organization may be exposed to unauthorized access to devices, potentially leading to serious data security consequences.
Recommendation
It is recommended to implement stronger authentication methods and monitor login attempts to minimize the risk of brute-force attacks.
Other vulnerabilities in Janitza UMG 508, 509, 511, 604, 605
See all- CVE-2015-3971High
The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, allowing remote attackers to read or write files and execute arbitrary JASIC code via a session on TCP port 1239.
- CVE-2015-3968High
The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.
Original NVD description (English source)
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.