CVE-2024-47943 — Improper signature verification of firmware upgrade files

Description (CNA)

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
RITTAL GmbH & Co. KG / IoT Interface & CMC III Processing Unit	affected <6.21.00.2

CWE

CWE-347

References

https://r.sec-consult.com/rittaliot
https://www.rittal.com/de-de/products/deep/3124300

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Oct/4