IoT Interface & CMC III Processing Unit vulnerabilities

2 known vulnerabilities in IoT Interface & CMC III Processing Unit from RITTAL GmbH & Co. KG. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  IoT Interface & CMC III Processing Unit: Insufficient Entropy

  CVE-2024-47945Oct 15, 2024RITTAL GmbH & Co. KG

  The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to

• 9.8 Critical severity

  IoT Interface & CMC III Processing Unit: Improper Verification of Cryptographic Signature

  CVE-2024-47943Oct 15, 2024RITTAL GmbH & Co. KG

  The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string