CVE Feed

    Dashboard / CVE / CVE-2020-11955

    CVE-2020-11955

    An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions.

    Published:Jul 14, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 14, 2020
    EPSS Score:0.00221
    CVSS Score:8.8

    Affected Products

    Vendor
    Rittal
    Product
    Cmc Iii Pu 7030.000
    Vendor
    Rittal
    Product
    Cmc Iii Pu 7030.000 Firmware
    Vendor
    Rittal
    Product
    Cmciii-pu-9333e0fb
    Vendor
    Rittal
    Product
    Cmciii-pu-9333e0fb Firmware
    Vendor
    Rittal
    Product
    Iot Interface 3124.300
    Vendor
    Rittal
    Product
    Lcp-cw
    Vendor
    Rittal
    Product
    Lcp-cw Firmware
    Vendor
    Rittal
    Product
    Pdu-3c002dec
    Vendor
    Rittal
    Product
    Pdu-3c002dec Firmware

    Exploits

    https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High