Janitza: Multiple vulnerabilities in UMG 96RM-E
An unauthenticated remote attacker can exploit several vulnerabilities in Janitza UMG 96RM-E devices to ultimately gain full system access and remote code execution.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41712US | — | — | ||
An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permissi… | ||||
| CVE-2025-41711US | —OT erhöht | — | ||
An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access. | ||||
| CVE-2025-41710US | —OT erhöht | — | ||
An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges. | ||||
| CVE-2025-41709US | — | — | ||
An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- BehobenFirmware 3.13 installed on UMG 96RM-E 230V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 230V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 230V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 230V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 24V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 24V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 24V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
- BehobenFirmware 3.13 installed on UMG 96RM-E 24V
It is strongly advised to update to the newest version. The vulnerabilities are fixed in version 3.14.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan