Skip to content
Fencer Vulns
critical 9.1

CVE-2024-47945 json

Predictable Session ID

published 2024-10-15 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-42737

cvss
9.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.9%
EPSS 0.9% chance of exploitation in 30 days, percentile 59%
public exploits
0
none known

Summary

The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are predictable, with only 32,768 possible values per user, which allows attackers to pre-generate valid session IDs, leading to unauthorized access to user sessions. This is not only due to the use of an (insecure) rand() function call but also because of missing initialization via srand(). As a result only the PIDs are effectively used as seed.

Patch / fix

  • rittal_gmbh_and_co.kg iot_interface_and_cmc_iii_processing_unit 6.21.00.2

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.87% chance of exploitation in the next 30 days, higher than 59% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • r.sec-consult.com https://r.sec-consult.com/rittaliot referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

  • RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit
  • rittal_gmbh_and_co.kg iot_interface_and_cmc_iii_processing_unit

Classification

Weakness
  • CWE-340 Generation of Predictable Numbers or Identifiers
  • CWE-331 Insufficient Entropy

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.