CVE-2020-11955

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions...

Code injection

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.704 devices. Attackers can execute code...

Privilege escalation

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation...

Design/Logic Flaw

An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions...

CVE-2020-11951

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...

Code injection

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...

CVE-2020-11956

CVE-2020-11956 affects Rittal PDU-3C002DEC (5.17.10) and CMCIII-PU-9333E0FB (3.17.10). Connected sources corroborate a privilege-violation issue with command-injection/CLI bypass patterns across multiple Rittal products, including PDU and CMC III PU variants. SEC Consult advisories and related CV...

CVE-2020-11955

CVE-2020-11955 concerns insecure permissions on Rittal PDU-3C002DEC (5.15.70) and CMCIII-PU-9333E0FB (3.15.70). Connected sources confirm broader issues in related Rittal software family (CMC III PU Compact, PDU portfolio, LCP-CW, IoT Interface 3124.300) involving bypass paths, command injection,...

CVE-2020-11953

An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.704 devices. Attackers can execute code...

CVE-2020-11952

An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu...

CVE-2020-11951

CVE-2020-11951 affects Rittal devices (PDU-3C002DEC up to 5.17.10 and CMCIII-PU-9333E0FB up to 3.17.10) with a hard-coded backdoor root account. Multiple connected sources (RH Red Hat, NVD, CVE lists, SEC Consult/Sec) corroborate the presence of a privileged backdoor and multiple vulnerable produ...