https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 05:58:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258683 EUVD-2026-258683 https://cve.radiocsirt.org/vuln/euvd-2026-258683 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47943 <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47943 https://cve.radiocsirt.org/vuln/ghsa-3ggr-5p57-2xgh <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-3ggr-5p57-2xgh