CVE-2024-47945 Predictable Session ID
Attackers can hijack user sessions by predicting low-entropy session IDs generated with insecure random functions, leading to unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-47945?
CVE-2024-47945 is a critical authentication bypass vulnerability in RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit, published on 15 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to unauthorized access to user sessions. This is not only due to the use of an (insecure) rand() function call but also because of missing initialization via srand(). As a result only the PIDs are effectively used as seed.
Which versions are affected by CVE-2024-47945?
It affects 2 products.
Products include Rittal Cmc Iii Processing Units Firmware, Rittal Iot Interface Firmware.
How do I fix CVE-2024-47945?
No fix has been published for CVE-2024-47945 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-47945 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-47945 exists.
Sources
Also known as GHSA-3qfw-5g24-8pmq.