Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-34573

Incorrect calculation in Enbra EWM does not report backflows or no flow events

In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm
CVE-2021-34572

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm
CVE-2021-34571

Hard-coded Credentials in Enbra Wireless M-Bus devices

Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm