Vulnerabilities

TI-2021-17369 CVE-2021-40223 · GHSA-p463-qxf4-3j5v

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on…

LOW 25

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filter dialog).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-09 No fix listed CWE-79

TI-2021-17368 CVE-2021-40222 · GHSA-cxf9-4ff5-hx4j

Rittal CMC PU III Web management Version affected: V3.11.00_2.

LOW 39

Rittal CMC PU III Web management Version affected: V3.11.00_2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04693 Published 2021-09-09 No fix listed CWE-78

TI-2019-13996 CVE-2019-19393 · GHSA-4xrr-ph69-m596

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices…

LOW 29

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2020-10-01 No fix listed CWE-79

Vulnerabilities

Filters

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on…

Rittal CMC PU III Web management Version affected: V3.11.00_2.

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices…