JUMO PSIRT (CSAF)
advisoryDEjumo_psirt
JUMO PSIRT CSAF 2.0 advisories (hosted by CERT@VDE).
01
advisories (3)
Vendor and ecosystem advisories describing this.
02
product assertions (20)
Products and version ranges known to be affected.
- Firmware 248.05.02 installed on JUMO mTRON T Central Processing Unit
- Firmware 249.05.03 installed on JUMO mTRON T Multifunction panel 840
- Firmware 266.04.07 installed on JUMO DICON touch
- Firmware 304.09.04 installed on JUMO AQUIS touch
- Firmware 9.0.2.5. installed on variTRON300
- Firmware 9.0.2.5. installed on variTRON500
- Firmware 9.0.2.5. installed on variTRON500 touch
- Firmware <248.05.02 installed on JUMO mTRON T Central Processing Unit
- Firmware <249.05.03 installed on JUMO mTRON T Multifunction panel 840
- Firmware <266.04.07 installed on JUMO DICON touch
- Firmware <304.09.04 installed on JUMO AQUIS touch
- Firmware <9.0.2.5. installed on variTRON300
- Firmware <9.0.2.5. installed on variTRON500
- Firmware <9.0.2.5. installed on variTRON500 touch
- Jumo Firmware 388.10.0.0.26 installed on variTRON500
- Jumo Firmware 431.10.0.0.26 installed on variTRON300
- Jumo Firmware 446.10.0.0.26 installed on variTRON500 touch
- Jumo Firmware <388.10.0.0.26 installed on variTRON500
- Jumo Firmware <431.10.0.0.26 installed on variTRON300
- Jumo Firmware <446.10.0.0.26 installed on variTRON500 touch
03
CVE links (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-15284US | — | — | ||
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.
Summary
The arrayLimit option in qs did not enforce limits for bra… | ||||
| CVE-2025-41731US | — | — | ||
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation… | ||||
| CVE-2014-9223US | high10.0 | — | ||
Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or po… | ||||
| CVE-2014-9222US | high10.0 | Exploit | ||
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that… | ||||
| CVE-2013-6786US | medium4.3 | — | ||
Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DS… | ||||