CVE-2019-19393 - CVE House
Back to Database
Status published Medium CVE-2019-19393

The Web application on Rittal CMC PU III 7030.000 V3.00...

Vulnerability Description

The Web application on Rittal CMC PU III 7030.000 V3.00 V3.11.00_2 to V3.15.70_4 devices fails to sanitize user input on the system configurations page. This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts) as the content is always displayed after and before login. Persistent XSS allows an attacker to modify displayed content or to change the victim's information. Successful exploitation requires access to the web management interface, either with valid credentials or a hijacked session.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19393

Credits & Attribution

No credits recorded in the NVD database.

References

More from rittal

View All →
CVE-2021-40223
Rittal CMC PU III Web management (version V3.11.00_2) fails to...
Medium 5.4
CVE-2021-40222
Rittal CMC PU III Web management Version affected: V3.11.00_2. Version...
High 7.2
CVE-2020-11956
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and...
Critical 9.8
CVE-2020-11955
An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and...
High 8.8
CVE-2020-11953
An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and...
High 8.8

Affected Vendor

Affected Software

cmc pu iii 7030.000 firmware
Vulnerable Versions:
3.11.00_2

Timeline

Official Publish: October 1st, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.