Skip to content
OpenAdvisories
Critical ICSA-24-291-05 3 CVEs

Kieback&Peter DDC4000 Series

Published Oct 17, 2024 · Updated Oct 17, 2024

Vendor: Kieback & Peter Product: DDC4002 Product: DDC4002e Product: DDC4020e Product: DDC4040e Product: DDC4100 Product: DDC4200 Product: DDC4200-L Product: DDC4200e Product: DDC4400 Product: DDC4400e

Summary

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to gain full administrator rights on the system.

Vulnerabilities 3

  • Critical 9.8
    CVE-2024-41717

    Kieback&Peter DDC4000 Series Path Traversal

    Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated attacker to read files on the system.

    Kieback & Peter DDC4400e DDC4002 DDC4040e
  • Critical 9.8
    CVE-2024-43698

    Kieback&Peter DDC4000 Series Use of Weak Credentials

    Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.

    Kieback & Peter DDC4200e DDC4020e DDC4100
  • High 8.4
    CVE-2024-43812

    Kieback&Peter DDC4000 Series Path Traversal Insufficiently Protected Credentials

    Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthenticated attacker with access to /etc/passwd to read the password hashes of all users on the system.

    Kieback & Peter DDC4200 DDC4400 DDC4200e

Revision history

  1. #1

    Initial Publication

References