Rittal records

12 published records for vendor rittal.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-13553No exploit	Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.carel · pcoweb firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	2.3%	Oct 25, 2019
39Monitor	CVE-2020-11951No exploit	An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.rittal · cmciii-pu-9333e0fb firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.7%	Jul 14, 2020
39Monitor	CVE-2020-11956No exploit	An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.rittal · cmciii-pu-9333e0fb firmware · CWE-269 Pre-auth	Critical9.8	—	1.6%	Jul 14, 2020
39Monitor	CVE-2024-47945No exploit	Predictable Session IDrittal · iot interface firmware · CWE-340 Pre-auth	Critical9.8	—	0.9%	Oct 15, 2024
36Monitor	CVE-2020-11953No exploit	An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices.rittal · cmciii-pu-9333e0fb firmware · CWE-78 RCE Command injection	High8.8	—	2.5%	Jul 14, 2020
35Monitor	CVE-2020-11955No exploit	An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices.rittal · cmciii-pu-9333e0fb firmware · CWE-276	High8.8	—	1.3%	Jul 14, 2020
30Monitor	CVE-2019-13549No exploit	Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.carel · pcoweb firmware · CWE-306 Pre-auth Auth bypass	High7.5	—	1.0%	Oct 25, 2019
29Monitor	CVE-2021-40222Proof of concept	Rittal CMC PU III Web management Version affected: V3.11.00_2.rittal · cmc pu iii 7030.000 firmware · CWE-78 RCE Command injection	High7.2	—	4.7%	Sep 9, 2021
24Monitor	CVE-2019-19393Proof of concept	The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurrittal · cmc pu iii 7030.000 firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Oct 1, 2020
24Monitor	CVE-2020-11952No exploit	An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.rittal · cmciii-pu-9333e0fb firmware	Medium6.2	—	0.5%	Jul 14, 2020
21Monitor	CVE-2021-40223Proof of concept	Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configurrittal · cmc pu iii 7030.000 firmware · CWE-79 XSS	Medium5.4	—	0.6%	Sep 9, 2021
18Monitor	CVE-2022-40633No exploit	Rittal CMC III Improper Access Controlrittal · cmc iii firmware · CWE-284 Broken access control (IDOR)	Medium4.6	—	0.3%	Mar 2, 2023

CVE-2019-13553
40Plan
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
carel · pcoweb firmwareOct 25, 2019
CVE-2020-11951
39Monitor
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Hard-coded credentials
rittal · cmciii-pu-9333e0fb firmwareJul 14, 2020
CVE-2020-11956
39Monitor
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
rittal · cmciii-pu-9333e0fb firmwareJul 14, 2020
CVE-2024-47945
39Monitor
Predictable Session ID
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
rittal · iot interface firmwareOct 15, 2024
CVE-2020-11953
36Monitor
An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices.
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
rittal · cmciii-pu-9333e0fb firmwareJul 14, 2020
CVE-2020-11955
35Monitor
An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices.
HighCVSS 8.8No exploitEPSS 1%
rittal · cmciii-pu-9333e0fb firmwareJul 14, 2020
CVE-2019-13549
30Monitor
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
carel · pcoweb firmwareOct 25, 2019
CVE-2021-40222
29Monitor
Rittal CMC PU III Web management Version affected: V3.11.00_2.
HighCVSS 7.2Proof of conceptEPSS 5%
- RCE
- Command injection
rittal · cmc pu iii 7030.000 firmwareSep 9, 2021
CVE-2019-19393
24Monitor
The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configur
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
rittal · cmc pu iii 7030.000 firmwareOct 1, 2020
CVE-2020-11952
24Monitor
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices.
MediumCVSS 6.2No exploitEPSS 1%
rittal · cmciii-pu-9333e0fb firmwareJul 14, 2020
CVE-2021-40223
21Monitor
Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configur
MediumCVSS 5.4Proof of conceptEPSS 1%
- XSS
rittal · cmc pu iii 7030.000 firmwareSep 9, 2021
CVE-2022-40633
18Monitor
Rittal CMC III Improper Access Control
MediumCVSS 4.6No exploitEPSS 0%
- Broken access control (IDOR)
rittal · cmc iii firmwareMar 2, 2023