CVE-2024-43698

EUVD-2024-40432
Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin rights on the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
kieback\&peterddc4400_firmware
𝑥
≤ 1.12.14
ADP
kieback\&peterddc4002e_firmware
𝑥
≤ 1.17.6
ADP
kieback\&peterddc4200e_firmware
𝑥
≤ 1.17.6
ADP
kieback\&peterddc4002_firmware
𝑥
≤ 1.12.14
ADP
kieback\&peterddc4100_firmware
𝑥
≤ 1.7.4
ADP
kieback\&peterddc4200_firmware
𝑥
≤ 1.12.14
ADP
kieback\&peterddc4200-l_firmware
𝑥
≤ 1.12.14
ADP
kieback\&peterddc4400e_firmware
𝑥
≤ 1.17.6
ADP
kieback\&peterddc4020e_firmware
𝑥
≤ 1.17.6
ADP
kieback\&peterddc4040e_firmware
𝑥
≤ 1.17.6
ADP
Common Weakness Enumeration
References
https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-05