C. Svoboda

**Name of the Vulnerable Software and Affected Versions** Rittal PDU-3C002DEC versions through 5.17.10 Rittal CMCIII-PU-9333E0FB versions through 3.17.10 **Description** An issue was discovered on Rittal devices, where there is a backdoor root account. **Recommendations** For Rittal PDU-3C002DEC versions through 5.17.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Rittal CMCIII-PU-9333E0FB versions through 3.17.10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rittal PDU-3C002DEC versions through 5.17.10 Rittal CMCIII-PU-9333E0FB versions through 3.17.10 **Description** An issue was discovered that allows attackers to bypass the CLI menu. **Recommendations** For Rittal PDU-3C002DEC versions through 5.17.10, update to a version that addresses the CLI menu bypass issue. For Rittal CMCIII-PU-9333E0FB versions through 3.17.10, update to a version that addresses the CLI menu bypass issue.

**Name of the Vulnerable Software and Affected Versions** Rittal PDU-3C002DEC versions 5.15.40 and earlier Rittal CMCIII-PU-9333E0FB versions 3.15.70 4 and earlier **Description** An issue was discovered that allows attackers to execute code. **Recommendations** For Rittal PDU-3C002DEC versions 5.15.40 and earlier, update to a version later than 5.15.40. For Rittal CMCIII-PU-9333E0FB versions 3.15.70 4 and earlier, update to a version later than 3.15.70 4.

**Name of the Vulnerable Software and Affected Versions** Rittal PDU devices versions 3C002DEC through 5.15.70 Rittal CMCIII-PU devices versions 9333E0FB through 3.15.70 **Description** An issue was discovered related to insecure permissions on the affected devices. **Recommendations** For Rittal PDU devices versions 3C002DEC through 5.15.70, update the device to a version with secure permissions. For Rittal CMCIII-PU devices versions 9333E0FB through 3.15.70, update the device to a version with secure permissions.

**Name of the Vulnerable Software and Affected Versions** Rittal PDU devices versions 3C002DEC through 5.17.10 Rittal CMCIII-PU devices versions 9333E0FB through 3.17.10 **Description** An issue was discovered that involves a least privilege violation. **Recommendations** For Rittal PDU devices versions 3C002DEC through 5.17.10, update to a version that addresses the least privilege violation issue. For Rittal CMCIII-PU devices versions 9333E0FB through 3.17.10, update to a version that addresses the least privilege violation issue.