Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-43698 EUVD-2024-40432GHSA-v47r-mpm7-6768

Kieback&Peter DDC4000 Series Use of Weak Credentials

Published Oct 22, 2024 · Updated Oct 23, 2024 · Assigned by icscert

Vendor: Kieback & Peter Product: DDC4002 Product: DDC4002e Product: DDC4020e Product: DDC4040e Product: DDC4100 Product: DDC4200 Product: DDC4200-L Product: DDC4200e Product: DDC4400 Product: DDC4400e

Description

Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.

Affected products

VendorProductAffectedFixed
Kieback&Peter DDC4040e ≤ 1.17.6 —
Kieback&Peter DDC4020e ≤ 1.17.6 —
Kieback&Peter DDC4400e ≤ 1.17.6 —
Kieback&Peter DDC4200e ≤ 1.17.6 —
Kieback&Peter DDC4002e ≤ 1.17.6 —
Kieback&Peter DDC4400 ≤ 1.12.14 —
Kieback&Peter DDC4200-L ≤ 1.12.14 —
Kieback&Peter DDC4200 ≤ 1.12.14 —
Kieback&Peter DDC4100 ≤ 1.7.4 —
Kieback&Peter DDC4002 ≤ 1.12.14 —

Advisories 1

References