https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:38:39.960871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258683 EUVD-2026-258683 2026-10-10T12:38:39.993322+00:00 EUVD-2026-258683 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47943 fkie_cve-2024-47943 2026-10-10T12:38:39.993359+00:00

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-3ggr-5p57-2xgh GHSA-3ggr-5p57-2xgh 2026-10-10T12:38:39.993395+00:00

The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.