CVE-2019-13553

EPSS 1.8%CWE-798

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Oct 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.

Affected products

n/a · Rittal Chiller SK 3232-Series

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://seclists.org/fulldisclosure/2019/Oct/45 https://www.us-cert.gov/ics/advisories/icsa-19-297-01