Vulnerability Description
The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://r.sec-consult.com/rittaliot
- https://www.rittal.com/de-de/products/deep/3124300
- http://seclists.org/fulldisclosure/2024/Oct/4
FAQ
What is CVE-2024-47943?
CVE-2024-47943 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh scr...
How severe is CVE-2024-47943?
CVE-2024-47943 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-47943?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.