PT-2024-32907 · Rittal Gmbh & Co. Kg+1 · Iot Interface & Cmc Iii Processing Unit+2

Johannes Kruchem · Published 2024-10-15 · Updated 2024-10-21 · CVE-2024-47945

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to unauthorized access to user sessions. This is not only due to the use of an insecure rand() function call but also because of missing initialization via srand(). As a result, only the PIDs are effectively used as seed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-340

CWE-331

Related Identifiers

CVE-2024-47945

Affected Products

Iot Interface & Cmc Iii Processing Unit

Cmc Iii Processing Units Firmware

Iot Interface Firmware

References · 11

• 🔥 https://r.sec-consult.com/rittaliot · Exploit
• https://rittal.com/de-de/products/deep/3124300 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-47945 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47945 · Vendor Advisory
• https://twitter.com/cracbot/status/1847518163535352221 · Twitter Post
• https://t.me/cvenotify/99017 · Telegram Post
• https://twitter.com/CVEnew/status/1846140039224611228 · Twitter Post
• https://t.me/cvenotify/98042 · Telegram Post
• https://t.me/cvedetector/7900 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1846245163670114408 · Twitter Post
• http://seclists.org/fulldisclosure/2024/Oct/4 · Note