Asang17

**Name of the Vulnerable Software and Affected Versions** Rittal CMC PU III Web management versions V3.11.00 2 through V3.17.10 **Description** The issue is related to a remote code execution vulnerability. It is possible to introduce shell code to create a reverse shell in the `PU-Hostname` field of the TCP/IP Configuration dialog. The web application fails to sanitize user input on the Network TCP/IP configuration page, allowing an attacker to inject commands as root on the device, which will be executed once the data is received. **Recommendations** For versions V3.11.00 2 through V3.17.10, update to a version later than V3.17.10 to resolve the issue. As a temporary workaround, consider restricting access to the TCP/IP Configuration dialog to minimize the risk of exploitation. Avoid using the `PU-Hostname` field in the TCP/IP Configuration dialog until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Rittal CMC PU III Web management version V3.11.00 2 **Description** The issue arises from the failure to sanitize user input on several configuration parameters, including the User Configuration dialog, Task Configuration dialog, and set logging filter dialog. This allows an attacker to inject HTML and browser-interpreted content, such as JavaScript or other client-side scripts, effectively backdooring the device. The payload is triggered when a user accesses specific sections of the application. **Recommendations** For version V3.11.00 2, consider disabling the configuration dialogs (User Configuration, Task Configuration, and set logging filter) until a patch is available to prevent exploitation. Restrict access to the affected sections of the application to minimize the risk of payload triggering. Avoid using the vulnerable parameters in the configuration dialogs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.