RITTAL GmbH & Co. KG vulnerabilities
We track 2 vulnerabilities in RITTAL GmbH & Co. KG products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest RITTAL GmbH & Co. KG vulnerabilities
- 9.8 Critical severity
IoT Interface & CMC III Processing Unit: Insufficient Entropy
The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to
- 9.8 Critical severity
IoT Interface & CMC III Processing Unit: Improper Verification of Cryptographic Signature
The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string