Janitza UMG 96RM E 24V(5222063) vulnerabilities
4 vulnerabilities
Known vulnerabilities in Janitza UMG 96RM E 24V(5222063), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2025-41709janitza · umg 96rm-e 230v(5222062) +3 moreCommand injection in power analyzer via Modbus-TCP and Modbus-RTUAn unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.EPSS2.19%MediumCVE-2025-41712janitza · umg 96rm-e 230v(5222062) +3 moreIncorrect Permission Assignment on power analyzerAn unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.EPSS0.40%MediumCVE-2025-41710janitza · umg 96rm-e 230v(5222062) +3 moreUse of Hard-coded Credentials in power analyzerAn unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.EPSS0.39%MediumCVE-2025-41711janitza · umg 96rm-e 230v(5222062) +3 moreUse of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzerAn unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.EPSS0.32%