Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-34572 EUVD-2021-21222GHSA-7x8j-m6q2-x954

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Published Sep 16, 2021 · Updated Sep 16, 2024 · Assigned by CERTVDE

Description

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

Affected products

VendorProductAffectedFixed
Enbra EWM 1.7.29 03.11.2019 —

References