CVE-2024-47944: Rittal GmbH & Co. Kg IoT Interface & Cmc Iii Processing Unit

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.

Affected products

• Rittal GmbH & Co. Kg IoT Interface & Cmc Iii Processing Unit: before 6.21.00.2 (fixed in 6.21.00.2)
• Rittal GmbH And Co.kg IoT Interface And Cmc Iii Processing Unit: before 6.21.00.2 (fixed in 6.21.00.2)

Published 2024-10-15. Last modified 2026-06-17.