PT-2019-13416 · Rittal · Rittal Chiller Sk 3232-Series

Publicado 2019-10-25 · Atualizado 2020-02-10 · CVE-2019-13553

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rittal Chiller SK 3232-Series versions A1.5.3 through B1.2.4

Description The issue concerns the authentication mechanism in the web interface of the affected systems, which uses hard-coded credentials. This could allow attackers to influence primary operations, including turning the cooling unit on and off and setting the temperature set point.

Recommendations For versions A1.5.3 through B1.2.4, consider changing the hard-coded credentials to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the web interface to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-13553

Produtos afetados

Rittal Chiller Sk 3232-Series

Referências · 4

• https://us-cert.gov/ics/advisories/icsa-19-297-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13553 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13553 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2019/Oct/45 · Nota