Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-34572

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Enbra EWM 1.7.29

  • 03.11.2019affected

References