Description
An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Janitza | UMG 96-PA | 0.0.0 – < 3.54 | 3.54 |
| Janitza | UMG 96-PA-MID+ | 0.0.0 – < 3.54 | 3.54 |
Advisories 2
- WID-SEC-2025-2667 Janitza UMG 96-PA und UMG 96-PA-MID+: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 24, 2025
- VDE-2025-094 Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+ CERT@VDE · Nov 24, 2025