CVE-2015-3973

Published: Oct 28, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values.

Affected (5)

Products: Janitza: Umg 508, Umg 509, Umg 511, Umg 604, Umg 605

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Janitza Umg 508	All versions
Janitza Umg 509	All versions
Janitza Umg 511	All versions
Janitza Umg 604	All versions
Janitza Umg 605	All versions

Related CWEs

CWE-254

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.