CVE-2024-47943 Improper signature verification of firmware upgrade files
Attackers can execute arbitrary code on Rittal IoT devices by crafting malicious firmware patches using a hard-coded HMAC key.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-47943?
CVE-2024-47943 is a critical vulnerability in RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit, published on 15 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch files are signed before executing the containing run.sh script. The signing process is kind of an HMAC with a long string as key which is hard-coded in the firmware and is freely available for download. This allows crafting malicious "signed" .patch files in order to compromise the device and execute arbitrary code.
Weakness: CWE-347
Which versions are affected by CVE-2024-47943?
How do I fix CVE-2024-47943?
No fix has been published for CVE-2024-47943 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-47943 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-47943 exists.
Sources
Also known as GHSA-3ggr-5p57-2xgh.