Vendor
Janitza
14 known vulnerabilities in products by Janitza, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-41709 | Command injection in power analyzer via Modbus-TCP and Modbus-RTU | 9.8 | |
| High | CVE-2023-50895 | Janitza Gridvis: security vulnerability | 7.2 | |
| High | CVE-2025-41729 | DoS via Modbus Read Command | 7.5 | |
| Not rated | CVE-2015-3972 | Janitza Umg 508: security vulnerability | — | |
| Medium | CVE-2025-41712 | Incorrect Permission Assignment on power analyzer | 6.5 | |
| High | CVE-2023-50894 | Janitza Gridvis: Hard-coded Credentials | 8.8 | |
| Medium | CVE-2025-41710 | Use of Hard-coded Credentials in power analyzer | 6.5 | |
| Not rated | CVE-2015-3968 | Janitza Umg 508: security vulnerability | — | |
| Medium | CVE-2025-41711 | Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer | 5.3 | |
| Not rated | CVE-2015-3971 | Janitza Umg 508: security vulnerability | — | |
| Not rated | CVE-2015-3973 | Janitza Umg 508: security vulnerability | — | |
| Not rated | CVE-2015-3969 | Janitza Umg 508: security vulnerability | — | |
| Not rated | CVE-2015-3970 | Janitza Umg 508: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2015-3967 | Janitza Umg 508: Cross-Site Request Forgery (CSRF) | — |
Products
| Umg 508 | 7 | 0 |
| Umg 509 | 7 | 0 |
| Umg 511 | 7 | 0 |
| Umg 604 | 7 | 0 |
| Umg 605 | 7 | 0 |
| Umg 96rm-e 230v(5222062) | 4 | 0 |
| Umg 96rm-e 24v(5222063) | 4 | 0 |