CVE-2024-47944

Description

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.

References

https://www.rittal.com/de-de/products/deep/3124300

https://r.sec-consult.com/rittaliot

http://seclists.org/fulldisclosure/2024/Oct/4

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS