CRITICAL🇵🇱 Wersja polska

CVE-2019-13553

CVSS 9.8v3.1pub. 2019-10-25upd. 2024-11-21

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Carel Pcoweb Firmware

    OS
    Carel
    a1.5.3 – b1.2.4

  • Rittal Chiller Sk 3232

    HW
    Rittal
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-13549HIGH7.5same product

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentic...

CVE-2024-47945CRITICAL9.8PL ✓same vendor

Przewidywalne identyfikatory sesji w urządzeniach Rittal IoT Interface i CMC III

CVE-2022-34827CRITICAL9.9PL ✓same vendor

Nieprawidłowa kontrola dostępu w Carel Boss Mini 1.5.0

CVE-2020-11951CRITICAL9.8PL ✓same vendor

Ukryte konto backdoor root w urządzeniach Rittal PDU i CMCIII

CVE-2020-11956CRITICAL9.8PL ✓same vendor

Naruszenie zasady minimalnych uprawnień w urządzeniach Rittal PDU i CMCIII