CVE-2025-41712 | Medium | 6.5 | 2026-03-10 | An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result… |
CVE-2025-41711 | Medium | 5.3 | 2026-03-10 | An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access. |
CVE-2025-41710 | Medium | 6.5 | 2026-03-10 | An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges. |
CVE-2025-41709 | Critical | 9.8 | 2026-03-10 | An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device. |
CVE-2025-41729 | High | 7.5 | 2025-11-24 | An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denial of service. |
CVE-2023-50895 | High | 7.2 | 2024-03-26 | In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remot… |
CVE-2023-50894 | High | 8.8 | 2024-03-26 | In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function… |
CVE-2015-3973 | | | 2015-10-28 | Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via uns… |
CVE-2015-3972 | | | 2015-10-28 | The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attack… |
CVE-2015-3971 | | | 2015-10-28 | The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files… |
CVE-2015-3970 | | | 2015-10-28 | Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject ar… |
CVE-2015-3969 | | | 2015-10-28 | Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port (1) 1234 or… |
CVE-2015-3968 | | | 2015-10-28 | The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files… |
CVE-2015-3967 | | | 2015-10-28 | Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbi… |