312 matches found
CVE-2021-40222
CVE-2021-40222 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Remote Code Execution Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input o...
CVE-2021-40223
CVE-2021-40223 Application : Rittal CMC PU III Web management Devices : CMC PU III 7030.000 Software Revision : V3.11.002 Hardware Revision : V3.00 Attack type : Stored XSS Solution : Update to Software Revision V3.17.10 or later Summary : Web application fails to sanitize user input on Security...
CVE-2019-19393
Rittal CMC PU III – 저장형 XSS PoC 애플리케이션: Rittal CMC PU III 웹 관리 장치: CMC PU III 7030.000 소프트웨어 리비전: V3.11.002부터 V3.15.704까지 하드웨어 리비전: V3.00부터 V6.01까지 공격 유형: 저장형 XSS 해결 방법: 소프트웨어 리비전 V3.17.10 이상으로 업데이트 요약: 웹 애플리케이션이 시스템 구성 페이지에서 사용자 입력을 제대로 정화sanitize하지 못합니다. 이로 인해 공격자가 HTML 및 브라우저 해석 콘텐츠예: JS 또는 기타...
CVE-2026-33920
CVE-2026-33920 affects the login functionality of Nozomi Networks Guardian/CMC (versions before 26.3.0 ). The root cause is a missing validation of the anti-CSRF token in both standard and SAML login flows. An attacker holding a valid account can coerce a victim into unknowingly authenticating wi...
CVE-2026-33920 Cross-site request forgery in the Guardian/CMC login before 26.3.0
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2026-33391
Nozomi Networks Guardian/CMC contains an access control vulnerability in the Smart Polling configuration functionality, caused by insufficient validation of user privileges (incorrect authorization). An authenticated user with limited privileges can remotely bypass the web management interface's ...
CVE-2026-33389 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...
CVE-2026-33389
An improper certificate/host key validation vulnerability exists in the Smart Polling functionality of Nozomi Networks Guardian/CMC (before 26.3.0 ) and Nozomi Networks Arc (before v2.7.0 ). Encrypted connections to polled devices were established without validating the remote host's identity, an...
CVE-2026-33388 Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
CVE-2026-33388
CVE-2026-33388 is an access control vulnerability in the Credentials Manager functionality of Nozomi Networks Guardian/CMC (affected: versions before 26.3.0 ). The root cause is insufficient validation of user privileges , allowing a remote authenticated user with limited privileges to view a sub...
CVE-2026-33387 Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...
CVE-2026-33387
A template injection vulnerability in the Dashboards functionality of Nozomi Networks Guardian/CMC (before 26.3.0 ) is caused by improper validation of an input parameter. An authenticated user with required privileges can define a dashboard containing a malicious payload, or a victim can be soci...
Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
Summary An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. Impact A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual...
Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0
Summary An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. Impact An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modif...
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
Summary A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. Impact An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into...
Cross-site request forgery in the Guardian/CMC login before 26.3.0
Summary A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. Impact An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any...
CVE-2025-63587
rittalvuln The vulnerability is definitely relevant on Rittal CMC III 7030.000 with 3.15.704 , but possibly on other products as well the essence of the vulnerability: with correct login, the response returns login failed, but with incorrect login - error 'some error has occured...'. correct logi...
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).
...
