Rittal Gmbh & Co. Kg Iot Interface & Cmc Iii Processing Unit
3 CVEs affecting Rittal Gmbh & Co. Kg Iot Interface & Cmc Iii Processing Unit. Latest disclosed: 2024-10-15. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47945 | Critical | 9.8 | 2024-10-15 | The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with onl… |
CVE-2024-47943 | Critical | 9.8 | 2024-10-15 | The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed be… |
CVE-2024-47944 | Medium | 6.8 | 2024-10-15 | The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthentic… |