CVE-2019-13549 - Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3

Back Back to CVE browser

HIGH

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4

Published Oct 25, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.03%

Description

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on and off and setting the temperature set point, can be modified without authentication.

Affected products

Vendor n/a Product Rittal Chiller SK 3232-Series Default
n/a
- Version
  Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Rittal Chiller SK 3232-Series

n/a

Version	Status	Constraints
Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (3)

http://seclists.org/fulldisclosure/2019/Oct/46
mailing-listx_refsource_FULLDISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5004
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-297-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://seclists.org/fulldisclosure/2019/Oct/46		mailing-listx_refsource_FULLDISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5004		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-297-01		x_refsource_MISCThird Party AdvisoryUS Government Resource