Code injection

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu...

CVE-2020-11956

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation...

CVE-2020-11956

CVE-2020-11956 affects Rittal PDU-3C002DEC (5.17.10) and CMCIII-PU-9333E0FB (3.17.10). Connected sources corroborate a privilege-violation issue with command-injection/CLI bypass patterns across multiple Rittal products, including PDU and CMC III PU variants. SEC Consult advisories and related CV...

CVE-2020-11955

CVE-2020-11955 concerns insecure permissions on Rittal PDU-3C002DEC (5.15.70) and CMCIII-PU-9333E0FB (3.15.70). Connected sources confirm broader issues in related Rittal software family (CMC III PU Compact, PDU portfolio, LCP-CW, IoT Interface 3124.300) involving bypass paths, command injection,...

CVE-2020-11953

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.704 devices. Attackers can execute code...

CVE-2020-11953

CVE-2020-11953 affects Rittal PDU-3C002DEC (up to 5.15.40) and CMCIII-PU-9333E0FB (up to 3.15.70_4). The issue is a command injection that allows attackers to execute arbitrary code on affected devices. Documented by multiple sources (e.g., SEC Consult advisory and Red Hat/NVD entries) and descri...

CVE-2020-11952

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu...

CVE-2020-11952

CVE-2020-11952 affects Rittal PDU-3C002DEC (≤5.17.10) and CMCIII-PU-9333E0FB (≤3.17.10): vulnerability lets attackers bypass the CLI menu. Root cause and concrete exploit details are described in SEC Consult advisories; fixed versions are listed variably per product in the advisories. Remediation...

CVE-2020-11951

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...

CVE-2020-11951

CVE-2020-11951 affects Rittal devices (PDU-3C002DEC up to 5.17.10 and CMCIII-PU-9333E0FB up to 3.17.10) with a hard-coded backdoor root account. Multiple connected sources (RH Red Hat, NVD, CVE lists, SEC Consult/Sec) corroborate the presence of a privileged backdoor and multiple vulnerable produ...

CVE-2020-11952: Undefined Security Weakness

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu...

PT-2020-12945

Name of the Vulnerable Software and Affected Versions Rittal PDU-3C002DEC versions through 5.17.10 Rittal CMCIII-PU-9333E0FB versions through 3.17.10 Description An issue was discovered that allows attackers to bypass the CLI menu. Recommendations For Rittal PDU-3C002DEC versions through 5.17.10,...

PT-2020-12948

Name of the Vulnerable Software and Affected Versions Rittal PDU devices versions 3C002DEC through 5.17.10 Rittal CMCIII-PU devices versions 9333E0FB through 3.17.10 Description An issue was discovered that involves a least privilege violation. Recommendations For Rittal PDU devices versions...

PT-2020-12944

Name of the Vulnerable Software and Affected Versions Rittal PDU-3C002DEC versions through 5.17.10 Rittal CMCIII-PU-9333E0FB versions through 3.17.10 Description An issue was discovered on Rittal devices, where there is a backdoor root account. Recommendations For Rittal PDU-3C002DEC versions...

PT-2020-12947

Name of the Vulnerable Software and Affected Versions Rittal PDU devices versions 3C002DEC through 5.15.70 Rittal CMCIII-PU devices versions 9333E0FB through 3.15.70 Description An issue was discovered related to insecure permissions on the affected devices. Recommendations For Rittal PDU devices...

PT-2020-12946

Name of the Vulnerable Software and Affected Versions Rittal PDU-3C002DEC versions 5.15.40 and earlier Rittal CMCIII-PU-9333E0FB versions 3.15.70 4 and earlier Description An issue was discovered that allows attackers to execute code. Recommendations For Rittal PDU-3C002DEC versions 5.15.40 and...

CVE-2020-11956: Improper Privilege Management

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation...

CVE-2020-11955: Incorrect Default Permissions

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions...

CVE-2020-11953: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.704 devices. Attackers can execute code...

CVE-2020-11951: Use of Hard-coded Credentials

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...