PT-2021-22844 · Rittal · Rittal Cmc Pu Iii Web Management

Asang17 · Published 2021-09-09 · Updated 2021-09-22 · CVE-2021-40223

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rittal CMC PU III Web management version V3.11.00 2

Description The issue arises from the failure to sanitize user input on several configuration parameters, including the User Configuration dialog, Task Configuration dialog, and set logging filter dialog. This allows an attacker to inject HTML and browser-interpreted content, such as JavaScript or other client-side scripts, effectively backdooring the device. The payload is triggered when a user accesses specific sections of the application.

Recommendations For version V3.11.00 2, consider disabling the configuration dialogs (User Configuration, Task Configuration, and set logging filter) until a patch is available to prevent exploitation. Restrict access to the affected sections of the application to minimize the risk of payload triggering. Avoid using the vulnerable parameters in the configuration dialogs until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-40223

Affected Products

Rittal Cmc Pu Iii Web Management

References · 5

• 🔥 https://github.com/asang17/CVE-2021-XSS · Exploit
• https://osv.dev/vulnerability/CVE-2021-40223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40223 · Security Note
• https://t.me/cibsecurity/28568 · Telegram Post
• https://t.me/cvenotify/21256 · Telegram Post