https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 07:21:00 +0000 https://cve.radiocsirt.org/vuln/cve-2024-47943 <p><strong>Affected:</strong> RITTAL GmbH &amp; Co. KG IoT Interface &amp; CMC III Processing Unit</p> <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> <p><strong>Affected:</strong> RITTAL GmbH &amp; Co. KG IoT Interface &amp; CMC III Processing Unit</p> <p>The firmware upgrade function in the admin web interface of the Rittal IoT Interface &amp; CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious &#34;signed&#34; .patch files in order to compromise the device and execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/cve-2024-47943