CVE-2019-13553

Name of the Vulnerable Software and Affected Versions Rittal Chiller SK 3232-Series versions A1.5.3 through B1.2.4

Description The issue concerns the authentication mechanism in the web interface of the affected systems, which uses hard-coded credentials. This could allow attackers to influence primary operations, including turning the cooling unit on and off and setting the temperature set point.

Recommendations For versions A1.5.3 through B1.2.4, consider changing the hard-coded credentials to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the web interface to minimize the risk of exploitation.