CVE-2015-3971

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:janitza:umg_508:-:::::::*
	cpe:2.3:h:janitza:umg_509:-:::::::*
	cpe:2.3:h:janitza:umg_511:-:::::::*
	cpe:2.3:h:janitza:umg_604:-:::::::*
	cpe:2.3:h:janitza:umg_605:-:::::::*

History

No history.

Information

Published : 2015-10-28 10:59

Updated : 2024-02-04 18:53

NVD link : CVE-2015-3971

Mitre link : CVE-2015-3971

CVE.ORG link : CVE-2015-3971

JSON object : View

Products Affected

janitza

umg_508
umg_604
umg_511
umg_509
umg_605

CWE

CWE-284

Improper Access Control

{"id": "CVE-2015-3971", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-10-28T10:59:05.447", "references": [{"url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239."}, {"lang": "es", "value": "La interfaz de depurado en los dispositivos Janitza UMG 508, 509, 511, 604 y 605 no requiere autenticaci\u00f3n, lo que permite a atacantes remotos leer o escribir a archivos, o ejecutar c\u00f3digo arbitrario JASIC, a trav\u00e9s de una sesi\u00f3n en puerto TCP 1239."}], "lastModified": "2015-10-28T20:57:54.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:janitza:umg_508:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0AAC1AC1-5748-4993-9159-0612414E3CA2"}, {"criteria": "cpe:2.3:h:janitza:umg_509:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6574840-AA64-4E4D-86D1-968EEEE0281C"}, {"criteria": "cpe:2.3:h:janitza:umg_511:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFC7F511-A110-4306-9594-A2CDD1304323"}, {"criteria": "cpe:2.3:h:janitza:umg_604:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07C0FF49-A0BF-4141-A5D8-A139AEA86FE0"}, {"criteria": "cpe:2.3:h:janitza:umg_605:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D21FD36-E671-4766-969B-5C8E351A4493"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}