Skip to content
OpenAdvisories
Critical ICSA-15-265-03 7 CVEs

Janitza UMG Power Quality Measuring Products Vulnerabilities

Published Jun 25, 2015 · Updated Jun 9, 2025 · Revision 2

Vendor: Janitza Product: UMG 508 Product: UMG 509 Product: UMG 511 Product: UMG 604 Product: UMG 605

Vulnerabilities 7

  • Unscored —
    CVE-2015-3967

    Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attack…

  • Unscored —
    CVE-2015-3968

    The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for re…

  • Unscored —
    CVE-2015-3969

    Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection informati…

  • Unscored —
    CVE-2015-3970

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 dev…

  • Unscored —
    CVE-2015-3971

    The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows re…

  • Unscored —
    CVE-2015-3972

    The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication,…

  • Unscored —
    CVE-2015-3973

    Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote at…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References