Vulnerabilities

TI-2021-13591 CVE-2021-34573 · GHSA-p35r-5hv5-759h

Incorrect calculation in Enbra EWM does not report backflows or no flow events

LOW 27

In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00226 Published 2021-09-16 No fix listed CWE-682

TI-2021-13590 CVE-2021-34572 · GHSA-7x8j-m6q2-x954

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

LOW 28

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00227 Published 2021-09-16 No fix listed CWE-345

TI-2021-13589 CVE-2021-34571 · GHSA-mmrg-jwv9-9h53

Hard-coded Credentials in Enbra Wireless M-Bus devices

LOW 28

Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00226 Published 2021-09-16 No fix listed CWE-798

Vulnerabilities

Filters

Incorrect calculation in Enbra EWM does not report backflows or no flow events

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Hard-coded Credentials in Enbra Wireless M-Bus devices