CVE-2024-43698

Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2024-10-22

Last modified

2024-10-23

Weaknesses

CWE-1391

Affected products

• Ddc4002 Firmware (Kieback&peter)
• Ddc4002e Firmware (Kieback&peter)
• Ddc4020e Firmware (Kieback&peter)
• Ddc4040e Firmware (Kieback&peter)
• Ddc4100 Firmware (Kieback&peter)
• Ddc4200-l Firmware (Kieback&peter)
• Ddc4200 Firmware (Kieback&peter)
• Ddc4200e Firmware (Kieback&peter)
• Ddc4400 Firmware (Kieback&peter)
• Ddc4400e Firmware (Kieback&peter)
• Ddc4002 (Kiebackpeter)
• Ddc4002e (Kiebackpeter)
• Ddc4020e (Kiebackpeter)
• Ddc4040e (Kiebackpeter)
• Ddc4100 (Kiebackpeter)
• Ddc4200 (Kiebackpeter)
• Ddc4200-l (Kiebackpeter)
• Ddc4200e (Kiebackpeter)
• Ddc4400 (Kiebackpeter)
• Ddc4400e (Kiebackpeter)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05