Read the docs

RITTAL GmbH & Co. KG

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

RITTAL GmbH & Co. KG records in CISA KEV

No RITTAL GmbH & Co. KG vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-32186 CVE-2024-47943 · GHSA-3ggr-5p57-2xgh

Improper signature verification of firmware upgrade files

Priority HIGH 82

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00636 Published 2024-10-15 Fixed in 6.21.00.2 CWE-347
TI-2024-32187 CVE-2024-47944 · GHSA-m36f-v9qc-f9h5

Missing Protection Mechanism for Alternate Hardware Interface

Priority HIGH 65

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00398 Published 2024-10-15 Fixed in 6.21.00.2 CWE-1299
Open these records in search →