Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-47944

Missing Protection Mechanism for Alternate Hardware Interface

Description

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit

Default version status: affected

  • <6.21.00.2affected

References