CVE-2015-3970 — MEDIUM (4.3)

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Janitza	Umg 508	-
Janitza	Umg 509	-
Janitza	Umg 511	-
Janitza	Umg 604	-
Janitza	Umg 605	-

Related Weaknesses (CWE)

CWE-79

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03PatchThird Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03PatchThird Party AdvisoryUS Government Resource

FAQ

What is CVE-2015-3970?

CVE-2015-3970 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecifie...

How severe is CVE-2015-3970?

CVE-2015-3970 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-3970?

Check the references section above for vendor advisories and patch information. Affected products include: Janitza Umg 508, Janitza Umg 509, Janitza Umg 511, Janitza Umg 604, Janitza Umg 605.