« Volver al listado

CVE-2015-3971

Estado: ModificadaAlta (7.5)—

The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Janitza — UMG 508Janitza — UMG 509Janitza — UMG 511Janitza — UMG 604Janitza — UMG 605

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-3971",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-10-28T10:59:05.447",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239."
    },
    {
      "lang": "es",
      "value": "La interfaz de depurado en los dispositivos Janitza UMG 508, 509, 511, 604 y 605 no requiere autenticación, lo que permite a atacantes remotos leer o escribir a archivos, o ejecutar código arbitrario JASIC, a través de una sesión en puerto TCP 1239."
    }
  ],
  "lastModified": "2026-06-17T00:26:33.890",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:janitza:umg_508:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AAC1AC1-5748-4993-9159-0612414E3CA2"
            },
            {
              "criteria": "cpe:2.3:h:janitza:umg_509:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6574840-AA64-4E4D-86D1-968EEEE0281C"
            },
            {
              "criteria": "cpe:2.3:h:janitza:umg_511:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFC7F511-A110-4306-9594-A2CDD1304323"
            },
            {
              "criteria": "cpe:2.3:h:janitza:umg_604:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07C0FF49-A0BF-4141-A5D8-A139AEA86FE0"
            },
            {
              "criteria": "cpe:2.3:h:janitza:umg_605:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D21FD36-E671-4766-969B-5C8E351A4493"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}