Rittal Command Injection (CVE-2020-11953)

A command injection vulnerability exists in Rittal. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-11953

CVE-2020-11953 affects Rittal PDU-3C002DEC (up to 5.15.40) and CMCIII-PU-9333E0FB (up to 3.15.70_4). The issue is a command injection that allows attackers to execute arbitrary code on affected devices. Documented by multiple sources (e.g., SEC Consult advisory and Red Hat/NVD entries) and descri...