GCVE - cpe:2.3:a:rittal_gmbh_and_co.kg:iot_interface_and_cmc_iii_processing

Approved changes feed: RSS · Atom

cpe:2.3:a:rittal_gmbh_and_co.kg:iot_interface_and_cmc_iii_processing_unit:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Rittal Gmbh And Co.Kg (`e87ae143-c746-5b70-b3ca-52a5e8d5be32`)
Product	Iot Interface And Cmc Iii Processing Unit (`a7a9ba51-b51c-56ce-bd02-6c3e6d11445f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-47945`	vulnerable	2026-06-08 06:48:13.461988	Predictable Session ID The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to unauthorized access to user sessions. This is not only due to the use of an (insecure) rand() function call but also because of missing initialization via srand(). As a result only the PIDs are effectively used as seed. Published: 2024-10-15T10:05:58.333Z Updated: 2025-11-03T22:21:56.044Z Open on db.gcve.eu Reference links https://r.sec-consult.com/rittaliot https://www.rittal.com/de-de/products/deep/3124300	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47944`	vulnerable	2026-06-08 06:48:13.461446	Missing Protection Mechanism for Alternate Hardware Interface The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function. Published: 2024-10-15T09:00:30.605Z Updated: 2025-11-03T22:21:54.572Z Open on db.gcve.eu Reference links https://r.sec-consult.com/rittaliot https://www.rittal.com/de-de/products/deep/3124300	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.