JA
Vendor
Janitza
47
CVEs
0
On KEV
0
New 30D
Products
U5–
Umg 508
Janitza
7 CVEs0 on KEV0 new
U5–
Umg 509
Janitza
7 CVEs0 on KEV0 new
U5–
Umg 511
Janitza
7 CVEs0 on KEV0 new
U6–
Umg 604
Janitza
7 CVEs0 on KEV0 new
U6–
Umg 605
Janitza
7 CVEs0 on KEV0 new
U99.8
UMG 96RM-E 230V(5222062)
Janitza
4 CVEs0 on KEV0 new
U99.8
UMG 96RM-E 24V(5222063)
Janitza
4 CVEs0 on KEV0 new
GR8.8
Gridvis
Janitza
2 CVEs0 on KEV0 new
U97.5
UMG 96-PA
Janitza
1 CVEs0 on KEV0 new
U97.5
UMG 96-PA-MID+
Janitza
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-41712 | U9 UMG 96RM-E 24V(5222063) Janitza | 6.5 | Mar 10 | Incorrect Permission Assignment on power analyzer |
| CVE-2025-41711 | U9 UMG 96RM-E 24V(5222063) Janitza | 5.3 | Mar 10 | Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer |
| CVE-2025-41710 | U9 UMG 96RM-E 24V(5222063) Janitza | 6.5 | Mar 10 | Use of Hard-coded Credentials in power analyzer |
| CVE-2025-41709 | U9 UMG 96RM-E 230V(5222062) Janitza | 9.8 | Mar 10 | Command injection in power analyzer via Modbus-TCP and Modbus-RTU |
| CVE-2025-41729 | U9 UMG 96-PA Janitza | 7.5 | Nov 24 | DoS via Modbus Read Command |
| CVE-2023-50895 | GR Gridvis Janitza | 7.2 | Mar 26 | In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated… |
| CVE-2023-50894 | GR Gridvis Janitza | 8.8 | Mar 26 | In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote… |
| CVE-2015-3973 | U5 Umg 508 Janitza | – | Oct 28 | Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified… |
| CVE-2015-3972 | U5 Umg 508 Janitza | – | Oct 28 | The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access… |
| CVE-2015-3971 | U6 Umg 604 Janitza | – | Oct 28 | The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute… |
| CVE-2015-3970 | U5 Umg 508 Janitza | – | Oct 28 | Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script… |
| CVE-2015-3969 | U5 Umg 508 Janitza | – | Oct 28 | Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port (1) 1234 or (2) 1235 |
| CVE-2015-3968 | U5 Umg 508 Janitza | – | Oct 28 | The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on… |
| CVE-2015-3967 | U5 Umg 509 Janitza | – | Oct 28 | Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users |