Vulnerabilities

TI-2024-32188 CVE-2024-47945 · GHSA-3qfw-5g24-8pmq

Predictable Session ID

HIGH 82

The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00868 Published 2024-10-15 Fixed in 6.21.00.2 CWE-340

TI-2022-19276 CVE-2022-40633 · GHSA-q4g5-vhgq-vfr3

Rittal CMC III Improper Access Control

LOW 21

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00261 Published 2023-03-02 No fix listed

TI-2021-17369 CVE-2021-40223 · GHSA-p463-qxf4-3j5v

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on…

LOW 25

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filter dialog).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-09 No fix listed CWE-79

TI-2021-17368 CVE-2021-40222 · GHSA-cxf9-4ff5-hx4j

Rittal CMC PU III Web management Version affected: V3.11.00_2.

LOW 39

Rittal CMC PU III Web management Version affected: V3.11.00_2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04693 Published 2021-09-09 No fix listed CWE-78

TI-2019-13996 CVE-2019-19393 · GHSA-4xrr-ph69-m596

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices…

LOW 29

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2020-10-01 No fix listed CWE-79

TI-2020-09618 CVE-2020-11956 · GHSA-9gvc-6g9v-v5rp

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB…

MEDIUM 45

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2020-07-14 No fix listed CWE-269

TI-2020-09617 CVE-2020-11955 · GHSA-h5xc-3wh4-4q43

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB…

MEDIUM 41

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01313 Published 2020-07-14 No fix listed CWE-276

TI-2020-09616 CVE-2020-11953 · GHSA-59fx-725p-7v33

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB…

MEDIUM 43

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0247 Published 2020-07-14 No fix listed CWE-78

TI-2020-09615 CVE-2020-11952 · GHSA-jq3h-gh6x-8549

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB…

LOW 28

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00527 Published 2020-07-14 No fix listed

TI-2020-09614 CVE-2020-11951 · GHSA-q3pf-hhq3-r6v2

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB…

MEDIUM 45

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01655 Published 2020-07-14 No fix listed CWE-798

Vulnerabilities

Filters