CVE-2015-3973 — MEDIUM (5.0)

Vulnerability Description

Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Janitza	Umg 508	All versions
Janitza	Umg 509	All versions
Janitza	Umg 511	All versions
Janitza	Umg 604	All versions
Janitza	Umg 605	All versions

Related Weaknesses (CWE)

CWE-254

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03PatchThird Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-265-03PatchThird Party AdvisoryUS Government Resource

FAQ

What is CVE-2015-3973?

CVE-2015-3973 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token va...

How severe is CVE-2015-3973?

CVE-2015-3973 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-3973?

Check the references section above for vendor advisories and patch information. Affected products include: Janitza Umg 508, Janitza Umg 509, Janitza Umg 511, Janitza Umg 604, Janitza Umg 605.