Description
A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jumo variTRON300
Default version status: unaffected
0.0.0.0 to < 9.0.2.5affected
Jumo variTRON500
Default version status: unaffected
0.0.0.0 to < 9.0.2.5affected
Jumo variTRON500 touch
Default version status: unaffected
0.0.0.0 to < 9.0.2.5affected