Rittal
12 CVEs across 19 Rittal products. Browse Rittal vulnerabilities, severities, and proof-of-concept exploits.
Rittal products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47945 | Critical | 9.8 | 2024-10-15 | The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with onl… |
CVE-2022-40633 | Medium | 4.6 | 2023-03-02 | A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks. |
CVE-2021-40223 | Medium | 5.4 | 2021-09-09 | Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task… |
CVE-2021-40222 | High | 7.2 | 2021-09-09 | Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to i… |
CVE-2019-19393 | Medium | 6.1 | 2020-10-01 | The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This a… |
CVE-2020-11956 | Critical | 9.8 | 2020-07-14 | An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation. |
CVE-2020-11955 | High | 8.8 | 2020-07-14 | An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions. |
CVE-2020-11953 | High | 8.8 | 2020-07-14 | An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices. Attackers can execute code. |
CVE-2020-11952 | Medium | 6.2 | 2020-07-14 | An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu. |
CVE-2020-11951 | Critical | 9.8 | 2020-07-14 | An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account. |
CVE-2019-13553 | Critical | 9.8 | 2019-10-25 | Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured… |
CVE-2019-13549 | High | 7.5 | 2019-10-25 | Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not prov… |