Vendors / Enbra Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Enbra records in CISA KEV No Enbra vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00227 · Published 2021-09-16 · No fix listed CWE-345
Priority LOW 28
Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key.
CVSS 3.1 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00226 · Published 2021-09-16 · No fix listed CWE-798
Priority LOW 27
In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00226 · Published 2021-09-16 · No fix listed CWE-682
Open these records in search → All records by CVSS severity
Critical0 High0 Medium3 Low0 No CVSS0