VULNERABILITY INTELLIGENCE

CVE-2015-3971

CVSS score7.5 HIGH

EPSS probability1.62%

CISA KEVNot currently listed

Published2015-10-28

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.

Weakness classification

CWE-284: Improper Access Control

Primary references

ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource