Advisories · Technology

Janitza UMG 96RM-E 24V(5222063).

Every CVE that names Janitza UMG 96RM-E 24V(5222063) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-41712 CVE record

CVSS 6.5 Medium

Incorrect Permission Assignment on power analyzer
- Janitza UMG 96RM-E 24V(5222063)
- Janitza UMG 96RM-E 230V(5222062)
- Broken access control
Not analysed yet 10 Mar 2026
CVE-2025-41711 CVE record

CVSS 5.3 Medium

Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer
- Janitza UMG 96RM-E 24V(5222063)
- Janitza UMG 96RM-E 230V(5222062)
- Weak cryptography or TLS
Not analysed yet 10 Mar 2026
CVE-2025-41710 CVE record

CVSS 6.5 Medium

Use of Hard-coded Credentials in power analyzer
- Janitza UMG 96RM-E 24V(5222063)
- Janitza UMG 96RM-E 230V(5222062)
- Hard-coded credentials
Not analysed yet 10 Mar 2026
CVE-2025-41709 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Command injection in power analyzer via Modbus-TCP and Modbus-RTU
- Janitza UMG 96RM-E 24V(5222063)
- Janitza UMG 96RM-E 230V(5222062)
- Command injection
Not analysed yet 10 Mar 2026