PT-2021-20554 · Enbra · Enbra Ewm

Cyrill Brunschwiler · Published 2021-09-16 · Updated 2021-09-28 · CVE-2021-34572

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Enbra EWM version 1.7.29

Description: The issue concerns the lack of detection for replay attacks sent by wireless M-Bus Security mode 5 devices. Specifically, the timestamps of the sensor are replaced by the time of the readout, even if the data is a replay of earlier data. This allows an attacker to potentially manipulate the system by retransmitting previously sent data.

Recommendations: For Enbra EWM version 1.7.29, consider implementing additional security measures to detect and prevent replay attacks, such as verifying the authenticity of the data and checking for inconsistencies in the timestamps. As a temporary workaround, restrict access to the wireless M-Bus Security mode 5 devices to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2021-34572

Affected Products

Enbra Ewm

References · 4

• https://osv.dev/vulnerability/CVE-2021-34572 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34572 · Security Note
• https://t.me/cibsecurity/28978 · Telegram Post
• https://fit.vutbr.cz/~polcak/CVE-2021-34572.en · Note