CVE-2015-3969

Published: Oct 28, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port (1) 1234 or (2) 1235.

Affected (5)

Products: Janitza: Umg 508, Umg 509, Umg 511, Umg 604, Umg 605

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Janitza Umg 508	All versions
Janitza Umg 509	All versions
Janitza Umg 511	All versions
Janitza Umg 604	All versions
Janitza Umg 605	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.