CVE-2021-40223 - CVE House
Back to Database
Status published Medium CVE-2021-40223

Rittal CMC PU III Web management (version V3.11.00_2) fails to...

Vulnerability Description

Rittal CMC PU III Web management (version V3.11.00_2) fails to sanitize user input on several parameters of the configuration (User Configuration dialog, Task Configuration dialog and set logging filter dialog). This allows an attacker to backdoor the device with HTML and browser-interpreted content (such as JavaScript or other client-side scripts). The XSS payload will be triggered when the user accesses some specific sections of the application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-40223

Credits & Attribution

No credits recorded in the NVD database.

References

More from rittal

View All →
CVE-2021-40222
Rittal CMC PU III Web management Version affected: V3.11.00_2. Version...
High 7.2
CVE-2020-11956
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and...
Critical 9.8
CVE-2020-11955
An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and...
High 8.8
CVE-2020-11953
An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and...
High 8.8
CVE-2020-11952
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and...
Medium 6.2

Affected Vendor

Affected Software

cmc pu iii 7030.000 firmware
Vulnerable Versions:
3.11.00_2

Timeline

Official Publish: September 9th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.