PT-2021-20555 · Enbra · Enbra Ewm

Published 2021-09-16 · Updated 2021-09-28 · CVE-2021-34573

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Enbra EWM version 1.7.29

Description: The issue concerns the misinterpretation of events, specifically backflow and "no flow" events, when Enbra EWM version 1.7.29 is used with certain wireless M-Bus Sensors. This misinterpretation can lead to incorrect values and missing events.

Recommendations: For Enbra EWM version 1.7.29, consider temporarily restricting the use of the wireless M-Bus Sensors until a fix is available to prevent misinterpretation of backflow and "no flow" events. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-682

Related Identifiers

CVE-2021-34573

Affected Products

Enbra Ewm

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-34573 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34573 · Vendor Advisory
• https://fit.vutbr.cz/~polcak/CVE-2021-34573.en · Note
• https://t.me/cibsecurity/28977 · Telegram Post