Read the docs
TI-2024-32186 Aliases CVE-2024-47943GHSA-3ggr-5p57-2xgh

Improper signature verification of firmware upgrade files

Priority HIGH 82CWE-347Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-347.

Summary

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00636 50th percentileScored 2026-11-07
Fix Fixed IoT Interface & CMC III Processing Unit (RITTAL GmbH & Co. KG): 6.21.00.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RITTAL GmbH & Co. KGIoT Interface & CMC III Processing Unitbefore 6.21.00.26.21.00.2Patch availableCNA
  • IoT Interface & CMC III Processing Unit VendorRITTAL GmbH & Co. KG Affected before 6.21.00.2 Fixed in 6.21.00.2 Patch available CNA

Remediation

  • Fix · CNA IoT Interface & CMC III Processing Unit (RITTAL GmbH & Co. KG) Fixed in 6.21.00.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-47943
  2. 2026-10-03 Alias added: GHSA-3ggr-5p57-2xgh
  3. 2026-10-25 EPSS moved to the 50th–90th percentile

References

Patch 1

Advisory 1

  • TI-2024-32187 Missing Protection Mechanism for Alternate Hardware Interface CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences