Skip to content
OpenAdvisories

Vendor

Enbra

3 known vulnerabilities.

Products

EWM 1.7.29 3 AT-WMBUS-16-2 2 ER-AM DN 15 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.2
    CVE-2021-34573

    Incorrect calculation in Enbra EWM does not report backflows or no flow events

    In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.

    Enbra EWM 1.7.29 AT-WMBUS-16-2 ER-AM DN 15
  • Medium 6.5
    CVE-2021-34572

    Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

    Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

    Enbra EWM 1.7.29
  • Medium 6.5
    CVE-2021-34571

    Hard-coded Credentials in Enbra Wireless M-Bus devices

    Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.

    Enbra EWM 1.7.29 ER-AM DN 15 AT-WMBUS-16-2