CVE-2019-19393

Rittal CMC PU III – Stored XSS PoC Application: Rittal CMC PU III Web management Devices: CMC PU III 7030.000 Software Revision: From V3.11.002 to V3.15.704 Hardware Revision: From V3.00 to V6.01 Attack type: Stored XSS Solution: Update to Software Revision V3.17.10 or later Summary: Web...

CVE-2019-19393: Improper Neutralization of Input During Web Page Generation

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.002 to V3.15.704 devices fails to sanitize user input on the system configurations page. This allows an attacker to backdoor the device with HTML and browser-interpreted content such as JavaScript or other client-side scripts as the...

PT-2020-10154

Name of the Vulnerable Software and Affected Versions Rittal CMC PU III versions 3.00 to 3.15.70 4 Description The issue concerns a failure to sanitize user input on the system configurations page of the web application. This allows an attacker to inject HTML and browser-interpreted content, such...